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Abstract. This paper extends the dual calculus with inductive types and coinductive types. The paper 
first introduces a non-deterministic dual calculus with inductive and coinductive types. Besides the 
same duality of the original dual calculus, it has the duality of inductive and coinductive types, that is, 
the duality of terms and coterms for inductive and coinductive types, and the duality of their reduction 
rules. Its strong normalization is also proved, which is shown by translating it into a second-order dual 
calculus. The strong normalization of the second-order dual calculus is proved by translating it into 
the second-order symmetric lambda calculus. This paper then introduces a call-by-value system and a 
call-by-name system of the dual calculus with inductive and coinductive types, and shows the duality 
of call-by-value and call-by-name, their Church-Rosser properties, and their strong normalization. 
Their strong normalization is proved by translating them into the non-deterministic dual calculus 
with inductive and coinductive types. 



Dual Calculus DC given by Wadler B71 1281 is a type system which corresponds to the classical 
sequent calculus LK (see, for example, |7j). It represents computation induced by cut elimination 
in LK by using its expressions and their reduction. The dual calculus has two nice properties: 
computation in classical logic, and duality. 

The computation of classical logic has been intensively studied, for example, |f2] IH |S] HJ |2D] 
|21] |23j [27j [28]]. They all studied the Curry-Howard correspondence between classical logic and 
functional programming languages with sophisticated control structures like catch/throw and first- 
class continuations. This correspondence is an extension of the Curry-Howard correspondence 
between intuitionistic logic and the typed /1-calculus, which is well established. 

The classical sequent calculus LK has nice duality. We have an involution that maps conjunc- 
tion and disjunction to each other, and maps the left and right rules of conjunction to the right 
and left rules of disjunction and vice versa. This involution can be extended to the cut elimination 
procedure for LK. 

The system DC inherits the duality of the classical sequent calculus LK. Moreover, its proof 
terms called terms, coterms, and statements also have duality, since they correspond to proofs in 

2012 ACM CCS: [Theory of computation]: Models of computation — Computability — Lambda calculus. 
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LK. This implies that its reduction relation can have duality since the reduction relation is induced 
by the cut elimination procedure in LK. In this framework, Wadler gave the call-by- value and call- 
by-name strategies in DC, and showed the duality of them [27]. He also showed that the equational 
correspondence between DC and Parigot's /(//-calculus |[T9l , and showed the duality between call- 
by-value and call -by-name of the /tyi-calculus using the duality of the dual calculus ESI . Since then, 
the dual calculus has been actively studied ll26l[T2l[T3l . 

Inductive definitions are important in both mathematical logic and computer science. Inductive 
definitions strengthen expressiveness of logical systems (for example, See Q). They are central in 
programming and program verification [E2] [T8l [l4l for handling recursive data structures such as 
lists and trees, and specification of recursive programs. Coinductive definitions are also important 
since they can represent streams, infinite trees, and bisimulation, for example, in Il24l . 

This paper presents Dual Calculus DQuv with inductive types and coinductive types. Our cal- 
culus extends the duality of DC to inductive types and coinductive types. The involution in DC is 
extended so that it maps inductive types and coinductive types to each other. It also maps the left 
and right rules of inductive types to the right and left rules of coinductive types and vice versa. Be- 
cause of the duality of the proof rules, we will have cut elimination procedure that keeps the duality 
of inductive types and coinductive types. This induces the duality of the reduction relations of proof 
terms for inductive types and coinductive types. 

Our main results are: (1) the duality between inductive types and coinductive types with reduc- 
tion, (2) strong normalization in DQuv, (3) strong normalization in the second-order Dual Calculus 
DC2, (4) the duality between the call-by-value and call-by-name DQuv, and (5) the Church-Rosser 
property and strong normalization of the call-by-value and call-by-name DQuv. 

We will show strong normalization of DQuv. In order for proving the strong normalization, we 
will first show the strong normalization of the second-order Dual Calculus DC2 given by ll26l by 
interpreting it in second-order symmetric lambda-calculus given in ll2~D . Then strong normalization 
of DQuv is proved by interpreting it in DC2 by using second-order coding of inductive and coinductive 
types. 

We first introduce the system DQuv that does not have reduction strategies, since it is designed 
by the Curry-Howard correspondence for a standard cut elimination procedure in LK. The system 
can discuss non-deterministic aspects of computation in classical logic, since the execution of pro- 
grams in DQuv is non-deterministic. It also works as a base framework for other variants of DQuv 
with specific reduction strategies such as call-by-value and call-by-name that will be given later. 

The duality between call-by- value and call-by-name is first suggested by Filinski Q. The dual 
calculus gives a clear explanation for this duality by using the logical duality of classical logic. We 
will show the duality of call-by-value and call-by-name in the dual calculus extended with inductive 
types and coinductive types. We extend the call-by-value DC and the call-by-name DC given in ETl 
with inductive types and coinductive types, and introduce the systems CBV DQuv and CBN DQuv. They 
are obtained from DQuv by restricting its non-deterministic reduction to the call -by-value or call-by- 
name strategies, and also by adding some strategy-specific reduction rules. In the same way as |f27l, 
we show the duality of call-by-value and call-by-name in the dual calculus with inductive types 
and coinductive types. We will show the Church-Rosser property as well as strong normalization 
for CBV DQuv and CBN DQuv. The strong normalization will be shown by translating CBV DQuv and 
CBN DQuv into DQuv. 

In |DD]> the duality between inductive types and coinductive types in linear logic is studied. Our 
system DQuv shows the duality in ordinary sequent calculus LK. 

Momigliano and Tiu lfl6l [T71 discussed an intuitionistic sequent calculus with inductive def- 
initions and coinductive definitions and showed its cut elimination theorem. Our system DQuv is 
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a classical system and our strong normalization shows the cut elimination theorem of the classical 
sequent calculus. Our cut elimination procedure is not closed in an intuitionistic fragment because 
it keeps the duality and we have the corresponding proof rule that manipulates a succedent if we 
have some proof rule that manipulates an antecedent. So we cannot directly compare our method 
and their method. 

In category theory, inductive definitions are represented by initial algebras and coinductive 
definitions are represented by final coalgebras [|6], and their duality in category theoiy is known. 
Our system DQuv enables us to show the duality in a clear syntactic way by using a type system. 

Several papers for dual calculus investigated the duality of computation. Wadler showed the 
duality between values and continuations, and the duality between call-by-value computation and 
call-by-name computation by using the explicit duality of DC E71 1281 . The first author of this pa- 
per showed the duality between the call-by-name fixed point operator and the call-by-value loop 
operator by extending DC ifTTl . The first author also showed the duality of reduction between call- 
by-value computation and call-by-name computation in /i/i-calculus by using DC lfT2l to answer the 
open question presented in Wadler's invited talk at RTA2005 [28], which asked whether the dual- 
ity between call-by-value and call-by-name in his equation systems would be refined in reduction 
systems. Tzevelekos |[26l investigated the dual calculus given in ETl . He assumed some additional 
conditions on reductions, and showed both Church-Rosser property and strong normalization hold 
under his conditions. He also investigated the relationship between DC and the symmetric i-calculus 
by Barbanera and Berardi [23. A second-order extension of DC is also considered in ll26l . 

The system juju in H is a system with implication and subtraction, and also has duality. Their 
calculus with negation, conjunction, and disjunction is called yUjU AflV "" and the correspondence be- 
tween it and the dual calculus is discussed in [91. 



A semantical approach to the duality between call-by-value and call-by-name was studied by 
Selinger ll23l . He gave a categorical semantics of the /lju-calculus, and explained the duality by using 
the categorical duality. This approach is extended to the duality between the fixed point operator 
and the loop operator by Kakutani lITOl . 

Section 2 gives a definition of DC and states its duality. Section 3 introduces DQuv and shows 
its duality. Section 4 gives examples. In section 5, we give DC2 and show its strong normalization. 
Section 6 proves strong normalization for DQuv. Section 7 introduces CBV DQuv and CBN DQuv and 
shows their Church-Rosser properties and strong normalization. 



This section defines Dual Calculus DC and states its duality. This system is obtained from the original 
Dual Calculus given in |[27l by removing reduction strategies in reduction rules. This system gives 
us a base framework for several variants of dual calculi. 

Definition 2.1 (Types and Expressions of DC). Let X, Y, Z, . . . range over type variables, A, B, . . . 
range over types, The symbols x,y,z, ■ ■ ■ range over variables, and a,B, y, . . . range over covariables. 
We assume an involution (-)' between variables and covariables, which satisfies x" = x and a" = a. 
An expression (denoted by D,E, . . .) is either a term (denoted by M,N, . . .), a coterm (denoted by 
K,L,.. .), or a statement (denoted by 5, T, . . .). We define them as follows: 



2. The Dual Calculus DC 



Types 

Expressions 
Terms 
Coterms 
Statements 



A 

D 

M 

K 

S 



X\A A A \A VA | -A, 
M\K\S, 

x | <M,M) | <M)inl | <M)inr | [K]not | (S).a, 
a | [K,K] | fst[K] | snd[K] | not(M) | x.(S), 
M • K. 
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The term (5). a binds the covariable a in S . The coterm x.(S) binds the variable x in S . We write 
FV(D) for the set of free variables in D. We also write FCV(D) for the set of free covariables in 
D. We will use _[_/_] for substitution. For example, the substitution S [M/x] denotes the statement 
obtained from S by replacing x by M. 

The type A A B denotes a conjunction, Av B denotes a disjunction, and ->A denotes a negation. 
A variable means an ordinary variable. A covariable means an output port and gets some value after 
computation. A term represents an ordinary computation which becomes a value or puts values at 
output ports after computation. The term (M,N) means a pair. The terms (M)inl and (M)inr 
mean the left injection and the right injection to a disjoint sum, respectively. When [X]not gets 
its input, it gives the input to K and computes K. The term (S).a is an abstraction of S by a. It 
computes S and its value is the value at the output port a. A coterm represents continuation which 
puts values at output ports after computation when it gets its input. The coterm [K, L] gets an input 
of a disjoint sum. If the input is (M)inl, it gives M to K and computes K. If the input is (M)inr, 
it gives M to L and computes L. The coterm fst|X] gets an input of a pair. If the input is (M,N), 
then it gives M to K and computes K. The coterm snd[X] also gets an input of a pair. If the input is 
(M, N), then it gives N to K and computes K. The coterm not(M) gets a continuation as its input. 
It gives M to the continuation and computes the continuation. The coterm x.(S) is an abstraction of 
5 by x. If it gets an input, it puts the input in x and computes S . The statement M • K means the 
computation of K with the input M that may put values at output ports. 

A typing judgment (denoted by J) of DC takes either the form T h A | M : A, the form K : A \ 
T h A, or the form T\S h A, where T denotes a context x\ : A\, . . . , x„ : A„ that is a set of variable 

declarations, and A denotes a cocontext a\ : B\ a m : B m that is a set of covariable declarations. 

We will call M, K, and S a principal expression in those judgments. The domain of T (denoted by 
dom(T)) is the set of variables {jq, . . . , x n \ if T is x\ : A\,. . . ,x n : A n . The domain of A (denoted by 
dom(A)) is the set of covariables {a\,..., a m } if A is a\ : Si a m : B m . 

We intuitively explain the typing judgments. There can be other ways of intuitive explanation, 
for example, ll26l . In order to give an intuitive idea in general, we assume an evaluation strategy 
for expressions, and a notion of values for the strategy. For example, when we take call-by-name, 
the values will be canonical form, and the computation will be lazy evaluation. The focus | is used 
only for denoting which part contains a term, a coterm, or a statement in a judgment, and when we 
think the corresponding sequent in ordinary sequent calculus, we will erase it. The typing judgment 
x\ : A\, . . . ,x„ : A n V a\ : B\, . . . , a m : B m \ M : A means that when each X[ has a value of type 
Ai, and M is computed, then M returns a value of type A or some a,- gets a value of type Bj. The 
judgment K : A \ x\ : A\, . . . ,x n : A n h a\ : B\, . . . , a m : B m means that when each xi has a value of 
type Ai, an input of type A is given to K, and K is computed, then some o-,- gets a value of type B,-. 
The judgment x\ : A\, . . . ,x n : A n \ S \- a\ : B\, ...,a m : B m means that when each x,- has a value of 
type Ai and S is computed, then some or, gets a value of type Bj. We sometimes use the symbol h DC 
instead of the symbol h that appears in a judgment in order to explicitly show it is a judgment of DC. 
That is, we write T h DC A | M : A for the judgment T h A | M : A. Similarly, we write K : A \ V h DC A 
and T | S h DC A. 

The typing rules are given in Figure [T] If we erase terms, coterms, statements, and the symbol 
|, the system becomes logically equivalent to a fragment of classical sequent calculus LK, whose 
definition is given in, for example, Q. 
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(AxR) -— — (AxL) 



r, x : A h A | x : A ' a : A\T \- A, a : A 

T\-A\M:A T\-A\N:B, nN K : A \ Y h A L : B \ Y \- A , TN 

■ — i (A/?) ; — (VL) 

r h A | (M, N) : A A B [K,L] : A V B \ T h A 

(V/?l) 1 : (AL1) 



T h A | (M>inl : A V 5 f st[X| : A A B \ V h A 

r h A | M : B (v7?2) ^|T,A (AL2) 



T h A | (M)inr : A V B snd[K] : A A B \ T h A 

#:A|ThA , m r h A | M : A , 

C -1 ^) 7777; TTT^ 7 l - ^) 



r h A | [K]not : -.A not(M> : -A \ V h A 

r|ShA,ar:A T,x:A|S h A 

77TT 777^ T l/A) 



ri- A|(5).a: A x.(S) : A | T h A 

r h A | M : A iC : A|Th A 



r M«ZhA 



(Cm*) 



Figure 1 : Typing rules of DC 

Definition 2.2 (Reduction). The reduction relation — > DC is defined as the compatible closure of the 
following reduction rules: 

OSAi) (M,N) • fst[X] — > DC M • K, 

(J3A 2 ) (M, N) • snd[K] -^ DC N • K, 

03V (M)inl • [*T,L] ^ DC M • 

0SV 2 ) <M>inr • [K, L] ^ DC M • L, 

(/?-.) [iC]not • not(M) -^ DC M • K, 

(J3R) (S).a»K^ c S[K/a], 

(fiL) M • x.(S ) -^ DC S [M/x], 

(rjR) (M • a). a — > DC M, 

(tjL) x.(x • K) -^ DC 

where x and a are fresh in (r]L) and (///?), respectively. 

The rules (tjR) and (?7L) are necessary to get the results of computation of terms and coterms 
from computation of statements inside them. We do not include the ?7-rules for logical connectives 
that are given in ll28l . since these break the confluence property for call -by- value and call-by-name 
systems, which we will study in Section 7. In order to study a base framework, we first consider a 
non-deterministic rewriting system that does not commit to either the call-by-name or call-by-value 
theory. 

The system DC we consider first is obtained from the original dual calculus given in E71 by 
omitting evaluation strategies, dropping (^)-rules that provide strong evaluation under call-by-value 
and call-by-name strategies, and replacing (rjL) and (?/7?)-expansion rules by (rjL) and (?7/?)-reduction 
rules. 

The role of (r]L) and (?7/?)-reduction rules are to simplify logical proofs without changing any 
proof structure. In the last section, we also give the call-by- value and call-by-name variants of DQ/v. 
The role of these rules become clearer in that section since they are necessary to obtain a value as 
the result of a computation under some strategy. 
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The type of an expression is preserved by reduction. 

Proposition 2.3 (Subject reduction of DC). The following claims hold. 

(1) IfT h D c A | M: A and M — > DC N, then T h DC A | N : A holds. 

(2) If K : A | T h DC A and K — > DC L, then L : A \ T h DC A holds. 

(3) IfT | S hoc A and S — >dc T, then Y \ T hoc A holds. 

This proposition is shown by induction on reduction using the following substitution lemma. 

Lemma 2.4 (Substitution lemma). The following claims hold. 

(1) Suppose T h D c A | N: A is derivable. Then we have the following. 
(la) IfT, x: A h DC A\M: B, then T h DC A | M[N/x] : B, 

(lb) ifK: B\T,x: A h DC A, then K[N/x] : B \ T h DC A, arcd 
(lc) if T,x: A 1 5 h D c A, tfien T 1 5 [TV/*] h DC A. 

(2) Suppose L: A\F i-dc A is derivable. Then we have the following. 
(2a) #T h DC A, a: A \ M: B, then T h DC A | M[L/a] : B, 

(2b) B | T hoc A, or : A, ^[L/ck] : B \ T h DC A a«d 
(2c) j/T 1 5 hoc A, a: A, T | 5 [L/cr] h DC A. 

Proof. The claims (la), (lb), and (lc) are shown simultaneously by induction on M, K, and S . The 
claims (2a),(2b), and (2c) are also shown simultaneously by induction on M, K, and 5 . □ 

The following duality transformation extends the duality in the sequent calculus LK to terms, 
coterms, and statements. 

Definition 2.5 (Duality Transformation). The duality transformation (-)° from DC into itself is 
defined for types and expressions as follows: 

(X)° = X, (-A)° - -.(A)°, (A A B)° = (A) V (B)°, (A V B)° = (A)° A (B)°, 

(jc)° - x', (or)° = a', 

((M,N))° = [(M)°,(A0°], ([K,L])° = ((K)°,(LT), 

«M)inl)° = fst[(M)°], (fst[^])° - <(tf)°>inl, 

«M>inr)° - snd[(M)°], (snd[X]) = <(^)°>inr, 

(|X]not) - not<(^)°), (not<M»° = [(M)°]not, 

((S).a)° = a'.((S)°), (x.(S))° = ((S)°).x', 

(M»K)° = (K)° •{M)°. 

Note that a type and a statement are mapped to themselves. A term and a coterm are mapped to 
each other. 

We also define transformation for judgments. If T is x\ : A\,...,x n : A n , then (T)° is de- 
fined as {x\)° : (Ai)°,...,(x„)°: (A„)°. If A is a\ : B\,...,a m : B m , then (A) is denned as 
(ori)° : (AO , . . . , (a,„)° : (B m )°. The judgment (T h A | M: A)° is denned as (M)° : (A) | (A) h (T)°. 
The judgment (^ : A | T h A) is denned as (A) h (0° | (K)° : (A) . The judgment (T | S h A) is 
denned as (A)°|(5)° h (T)°. 

We also define transformation for inference rule names as follows: (AxR)° = (AxL), (AxL)° = 
(AxR), (VR\)° = (AL1), (AL1)° - (VRI), (AR)° = (VL), (VL)° = (A/?), (VL2)° - (A/?2), (V/?2)° = 
(AL2), (-.L)° = (-./?), (-.7?)° - (-iL), (IR)° = (7L), (7L)° - (IR), and (Cw*)° = (C«0- 

This duality transformation preserves substitution of terms and coterms. 
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Lemma 2.6. The following claims hold. 

(1) (D[M/x])° = (D)°[{M)°lx'l 

(2) (D[K/a])° = (D)°[(K)°la'l 

Proof. The claims (1) and (2) are shown by induction on D. We treat the first case of (1): the case 
of D is x. (x[M/x])° = (M)° = x'[(M)°/x'] = (x)°[(M)° /x']. The other cases are straightforwardly 
proved by the induction hypothesis. □ 

This duality transformation is shown to preserve typing and reduction, and to be an involution. 
This transformation is a homomorphism for this system in the sense that it preserves typing and 
reduction. An important feature of DC is its duality by this transformation. A term is dual to a 
coterm by this homomorphism. 

Proposition 2.7 (Duality of DC). The fallowings hold. 

(1) If J is derived from J\, . . . , J n (n - I or 2) by an inference rule R, then (J)° is derived from 
(J„)°, . . . , (Ji)° by the inference rule (R)°. 

(2) D ^ DC E implies (D)° -^ DC (E)°. 

(3) ((A) ) = A, ((D) ) = D, and ((J)°)° - / hold. 

Proof. The claim (1) is proved by case analysis of the inference rules. The claim (2) is proved by 
induction on the generation of — > DC using Lemma I2l6l The claim (3) is proved by induction on 
types and expressions. □ 

Remark 2.8. The (-) transformation maps dual reduction rules to each other. That is, if D — > DC E 
is the reduction rules (BAi), (J3A 2 ), (fiVi), (J3v 2 ), (J3^), (J3R), (J3L), (nR), and (77L), then (D)° — > DC 
(E)° is the reduction rules (/?Vi), (J3v 2 ), (Mi), (/?A 2 ), (fi^), <J3L), (J3R), (77L), and (i]R), respectively. 

Implication D can be denned by -1 and V in the same way as E71 . 

Definition 2.9. WewriteA D Bfor-iAvB. We also write Ax.M for (<[x«M)inr»y)]not)inl»y).y. 

We also write N@K for [not<A0, K]. 

The constructor @ simulates the application in /l-calculus together with •. The following holds 
from the definition. 

Proposition 2.10. The following typing inference rules and reduction rule are derivable. 

T, * : A h A I M : fi , m T \- A\M : A K:B\T\-A, TN 

i ' (=> R) ' i — ' O Q 

r h A I Ax.M : A D B M@K : A D B\T \- A 

(8 d) Ax.M • (N@K) ^ DC M[N/x] • K 



3. The Dual Calculus DQuv with Inductive and Coinductive Types 

In this section, we present DQuv, which is an extension of DC with inductive types and coinductive 
types. We first extend the definition of types of DC to inductive types /uX.A and coinductive types 
vX.A, and then extend expressions and reduction. 

In Section [2 we will introduce the second-order system DC2. The system DQuv is worth to be 
studied as well as DC2, since DQuv is within a first-order logic. 

We first define types, their positive type variables, and their negative type variables. A positive 
type variable in a type does not occur negatively in the type in the usual sense. A negative type 
variable in a type does not occur positively in the type. 
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Definition 3.1. The set of type variables is written by TyVars. We define the types of BCpv (denoted 
by A, B, . . .) and the set Pos(A) of positive type variables in the type A and the set Neg(A) of negative 
type variables in the type A as follows: 

A ::= X | A A A | A V A | -.A | pX.A \ vX.A 

where pX.A and vX.A are denned when the type variable X is in Pos(A). 

Pos(X) = TyVars, 
Neg(X) - TyVars \ {X}, 

Pos(Ai AA 2 ) = Pos(Ai V A 2 ) = Pos(Ai) nPos(A 2 ), 
Neg(Ai A A 2 ) = Neg(Ai VA 2 ) = Neg(AO n Neg(A 2 ), 
Pos(-.S) - Neg(B), 
Neg(-.5) - Pos(fi), 

Pos(pX.B) = Pos(vXB) - Pos(S) U {X}, 
Neg(pX.B) = Neg(vX.B) = Neg(fi) U {X}. 

The types pX.A and vX.A bind X in A. 

When we think standard semantics of the propositional logic with inductive and coinductive 
definitions, pX.A and vX.A are interpreted by the least fixed point and the greatest fixed point of the 
monotone function P respectively, where V is the function which maps a set U to the set A[U/X]. 
Let p be pX.A and v be vX.A. They will have the following properties: (a) A[p/X] c p, (b) A[B/X] c 
B implies p c B, (c) v c A[v/X], and (d) 5 c A[B/X] implies 5 c y. Based on this meaning, we 
will introduce terms, coterms, and their reduction for inductive and coinductive types in the same 
way as |[T5l . 

Definition 3.2. The terms, coterms, and statements of DCpv are defined as follows: 

M ::= x | (M,M) \ (M)inl | (M)inr | [K]not \ (S).a \ iif XA (M) \ coitr^(M,M>, 
K :- a | [/<:,/<:] | fst[7«:] | snd[K] \ not(M) | x.(5) | out vXA [^] | itr*[K,K], 
S ::= M • K. 

The term itr A [/T, L] binds a in ^. The coterm coitr^(M, N) binds x in M. 

The expressions in MXA (M) and itr^fA', L] are the expressions for inductive types. The con- 
structor in MX A maps a term of type A[jiX.A/X] to that of pX.A. The coterm itr^[X, L] is an iterator 
having an input of type pX.A where L is a postprocessor after iteration. When it gets the input of 
type pX.A, first a value of type A[pX.A/X] is computed according to the input, next a value of type 
A[B/X] is computed by recursive invocation of the iterator, then it is given to K and K is computed 
to get a value of type B, and finally the value is given to L and L is computed. Dually, out vX - A [X] 
and coitr A (M,A0 are defined for coinductive types. The constructor out vXA maps a coterm of 
type vX.A to that of A[vX.A/X]. When the coterm out vXA [X] gets the input of type vX.A, first the 
input is transformed into a value of type A[vX.A/X], then the value is given to K, and finally K is 
computed. The term coitrf(M, N) is a coiterator of type vX.A. It transforms N of type B into a 
value of vX.A according to M. Type annotations will be necessary for defining reduction rules. 

Definition 3.3. The typing rules of DCpv are defined by those of DC and the following rules: 



Th A\M :A[pX.A/X] 



(pR) 



K :A[B/X]\Y \- A,a : B L . B\T \- A 
itr B a [K,L\ : pX.A \ Y h A 



T h A | irf XA {M) : pX.A 



CALL-BY- VALUE AND CALL-BY-NAME DUAL CALCULI WITH INDUCTIVE AND COINDUCTIVE TYPES 



9 



out vXA [K] : vX.A | T h A 



K : A[vXA/X]\T h A 



(vL) 



r,jc:flhA|Af :A[fl/X] rHA|jV:fi 
T h A|coitrf<M,AO : vX.A 



We sometimes use the symbol Hd CjUV instead of the symbol h in a judgment in order to explicitly 
show it is a judgment of DQuv. That is, we write T h DC/iy A | M : A for the judgment r I- A | M : A. 
Similarly, we write K : A \ T h DCjUV A and T \ S i-dquv A. 

The system DQuv satisfies the following basic lemmas. 

Lemma 3.4 (Weakening lemma of DQuv). Let T c T' and A c A'. Then 

(1) if T h DCiUV A | M : A is provable, then F h DC/JV A' | M : A holds, 

(2) if K : A | T h DC/JV A is provable, then K: A \ F h DC/iV A' holds, and 

(3) if T | S h DC/iV A is provable, then F \ S h DCjUV A' holds. 

Proof. They are shown simultaneously by induction on M, K, and 5 . □ 

Lemma 3.5. Let F cr and A' c A. Then the following claims hold in DQuv. 

(1) IfFV(M) c dom{V) and FCV{M) C dom(A'), then V h A | M: A implies F h A' | M: A. 

(2) IfFV{K) c dom(F) and FCV{K) C dom(A'), then K: A \ Y h A implies K: A | F h A'. 

(3) IfFV{S) c <fom(F) a«J FCV(5) C dom(A'), then V \ S h A zmp//es T' | 5 h A'. 

Proof. They are shown simultaneously by induction on M, ^, and 5 . □ 

Lemma 3.6 (Substitution lemma of DQuv). The following claims hold. 

(1) Suppose r i-dc/jv A I Af : A derivable. Then the following hold. 
(la) IfT,x: A h DQ/v A | M : B, T h DCjU y A | M[N/x] : B, 
(lb) ifK: B\F,x: A h DCjUV A, j7ien K[N/x] : B\T h DC ^ v A, and 
(lc) ifF, x: A | S h D cpv A, f^en T | S [N/x] h D Qiv A. 

(2) Suppose L : A | T Hdq/v A w derivable. Then the following hold. 
(2a) 7/T h D cpv A, a : A | M : B, T h DCA , v A | M[L/a] : B, 
(2b) if K: B\F h D Qiv A, a : A, f/ierc K[L/a] : B\T i-dqiv A arad 
(2c) if T 1 5 h DC(UV A, a: A, then V \ S [LI a] h DC(UV A. 

Proof. The claims (la), (lb), and (lc) are shown simultaneously by induction on M, K, and S. The 
claims (2a), (2b), and (2c) are also shown simultaneously by induction on M, K, and S . □ 

The duality transformation can be extended from DC to DQuv. 

Definition 3.7 (Duality Transformation). The duality transformation for types, terms, coterms, 
statements, and inference rule names of DQuv is defined by those of DC and the following equa- 
tions: 



(pX.A)° = vX.(A) , (vX.A)° = pX.(A)°. 

(in^ A (M» = out vX(A) °[(M)°], 
(out vXA [K])° = irf x - (A) °((K) ), 
(itr^L])" = coitr^ )0 <(^)°,(L)°), 
(coitr A (M,Ar»° = itr^ )0 [(M)°, (A0°]. 

Gufl)° = (vL), (yL)° = QiR), (juL)° = (vR), (vR)° - QxL). 



The above duality transformation is well-defined. 
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Lemma 3.8. The type (A)° is defined, and Pos(A) = Pos((A)°) and Neg(A) = Neg((A)°) hold. 

Proof. These claims are shown by induction on A. We consider the cases of pX.B and vX.fi. The 
other cases are straightforwardly proved by the induction hypothesis. 

The case of pX.B: Suppose that pX.B is defined. Then we have X is in Pos(fi). By the induction 
hypothesis, (fi)° is defined and X occurs positively in (fi)°. Therefore vX.{B)° is defined, and we 
have PosQiX.B) = Pos(vX.(fi)°) and NegQiX.B) = Neg(vX.(B)°) by the induction hypothesis. 

The case of vX.B can be shown in the similar way to the case of pX.B. □ 

This duality transformation alternates free variables and free covariables that occur in terms 
and coterms. Let *V be a set of variables, and C be a set of covariables. Then a set of covariables 
0V)° is defined by {x' \ x e ( V\. A set of variables (C)° is also defined by {a' \ a e C}. 

Lemma 3.9. Let D be an expression ofVQpv. Then FV((D)°) = (FCV(D)) and FCV((D)°) = 
(FV(D))° hold. 

Proof. The claims are shown by induction on D. □ 
This duality transformation preserves substitution of types, terms, and coterms. 

Lemma 3.10. Let A and B be types, D be an expression, M be a term, and K be a coterm ofBCpv. 
Then the following hold. 

(1) (A[B/X])° = (A)°[(B)°/X]. 

(2) (D[M/x])° = (D)°[(M)7*a 

(3) (D[K/a])° = (Dy[(K)°/a']. 

Proof. The claim (1) is shown by induction on A. The claims (2) and (3) are shown by induction on 
D. □ 

The extended duality transformation preserves typing, and is an involution in DQuv. 
Proposition 3.11. The following claims hold. 

(1) If J is derived from J\, . . . ,J n (n = I or 2) by an inference rule R, then (J)° is derived from 
(J n )°, (Ji)° by the inference rule (R)°. 

(2) ((A)°)° = A, ((D) ) = D, and ((7)°)° = J hold for any type A, expression D, and judgment J of 
DQuv. 

Proof. The claim (1) is shown by case analysis of the inference rules of DQuv using Lemma [3. 101 
(1). The claim (2) is shown by induction on types and expressions. □ 

Our reduction rules for inductive and coinductive types will be defined so that they correspond 
to cut elimination procedures in the classical sequent calculus LK extended with inductive defini- 
tions and coinductive definitions. In the following proof figures, we will write p, v, and A[B] for 
pX.A, vX.A, and A[B/X] respectively. In the logical system, when the cut formula is an inductive 
type, the cut elimination procedure reduces the proof 

r>A,AM A[B],fhA,B B,ThA 

r h A,p JOTa 

" T7A " {Cut) 

to the proof 
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: A[B],YkA,B B,T\-A,B : 

r h A,A[ju] /n7M fi,n-A,B _ ifi A[B],f\-A,B 

(Wk) (mono) 



rhA,fi,AM v - A[fi],r \- A,B 

r,A,B {Cut) a ,rVA . r rt 

FTa (CMf) 

We can intuitively understand the rule (mono) as follows: /j h 8 implies A[/i] h A[B], so we have 
A[fj] h B by combining it with A[fi] h B. This rule will be formally shown in Lemma |3.14| (2a). 
This reduction changes the cut formula from /i to A\p\. We do not have to count the cut formula B, 
since that cut is auxiliary. When the cut formula is a coinductive type, the cut elimination procedure 
reduces a proof in a dual way to the above reduction. 

When we have a function Ax.M from A to B and the variable X is in Pos(C), we can define 
the function from C[A/X] to C[B/X] by extending Ax.M. We will use mono^ M [N] so that this 
function maps z to mono^g M {z}. We will define mono^g x M {N] by induction on the measure ||C||x 
for a type C and a type variable X, which is defined by induction on C as follows: If X is not free in 
A, then ||A||x = 0. In the other cases, we assume that some X occurs in A and we define 

\\X\\x = 1, 

||AAfi|k = ||AV*||x = ||A||z + ||*|k + l, 
IhAllx = l|A||* + 1, 

\\hY.A\\ x = \\vY.A\\ x = \\A\\x + \\A\\y + 1. 

Note that if X is not free in B and we have X + Y, then ||A|| X = ||A[£/F] || x . 

The number |Allx will also be used for evaluating the size of monof g xM [N} by using M, N, 
and C (see Lemma ET2b . If we replaced lAllx + IAIIf + 1 by ||A||x + 1 in the definition of ||/iKA||x 
and ||vYA|bc, it would not work for this purpose. 

Definition 3.12. Assume a type variable X and types A, B, C are given and X is not free in A and B. 
For a variable x and terms M and N, we define the term mono^ x M {N} by induction on || C \\x as 
follows: 

monof g j M {Af} - N (X does not occur in C), 

mono f;MW - <monoJJ xM {(Ar.£st[Qr]).a}, monog^tfJV • sndfy?])./?} ), 
mon °f;S{^l = V* • [v.«monof;^ vM {y! )inl . y), z .«mono^ t M {z} )inr • y)]).y, 
monoj;^ M {N] - [ z.(N • not< mono££ x M {z] > ) ]not, 

monoJ^>} = (iV • it^™UXin^^ > • a ),B] ).B, 

mono™f M {N} = coitrf c ^<monof^ AT). 
For a covariable a and coterms K and L, we also define 



Note that ||/iF.C|| x > \\C\jiY.C[B/X]/Y]\\ x and ||vF.C|| x > ||C[yF.C[A/X]/F]|| x hold since X is 
not free in fiY.C[B/X] and vKC[A/X]. We cannot replace C\jj.Y.C[B/X]/Y] by C in the defini- 
tion of mono^'^^IAf} because of the type annotation for in. For readability, we sometimes write 
mono^ g x {M, N] and mono^g JK, L] for monojg xM {N] and mono^g^ ^{L}, respectively. 
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The paper ifTTl studied an intuitionistic logical system with strictly-positive inductive defini- 
tions, and on the other hand we study a classical logical system with positive inductive definitions. 
Our cut elimination for inductive types is the same as theirs, and on the other hand our cut elimi- 
nation for coinductive types is different from theirs. They can avoid the use of mono. However, we 
cannot straightforwardly compare our method and their method, since our system is strictly larger 
than their system. 

Our method works only for classical logic and does not work for an intuitionistic logic. This 
is because our cut elimination procedure keeps the duality and we have the corresponding proof 
rule that manipulates a succedent if we have some proof rule that manipulates an antecedent. In 
particular, we define the operator mono for coterms as the dual of the operator mono for terms. 
Roughly speaking, in the proof of the next lemma, when we show the properties of mono for negation 
by using the derivation 

A h B 
A,-.fi h 
->B h -A, 

we need the following derivation in order to show the properties of its dual: 
B \- A 

-■A h -iB 

which uses a non-intuitionistic sequent. 

Lemma 3.13. The following claims hold. 

(la) FV(monofC, x {M,N}) c (FV(Af) \ {*}) U FV(N). 

(lb) FCV(waaa%% x {M,N}) c FCV{M) U FCV(N). 

(2a) FV{mono x A c Ba {K,L\) c FV(K) U FV(L). 

(2b) FCV(wma™JK,L}) c (FCV(K) \ {a}) U FCV(L). 

Proof. The claims (la) and (lb) are shown by induction on ||C||x- The claims (2a) and (2b) are 
shown by using (la), (2b), and Lemma [3791 □ 

Lemma 3.14. Assume X is in Pos(C) and Neg(D). Then the following hold: 
(la) T,x: A h A | M: BandT h A | N: C[A] implies T h A | mono*£ xM {N] : C[B], 
(lb) T, x : B h A | M : A and Y h A | N : D[A] implies V h A | monof f Y M {A^} : D[B], 
(2a) K : A \ T h A, a : B and L : C[B] \ V h A implies mono^^ a K {L) : C[A] \ T h A, 
(2b) ^ : B | T h A, a : A W L : D[B] \ T h A, jmp/jej mono^ a ^{L) : C[A] | T h A, 

where C[A] and D[A] are abbreviations ofC[A/X] and D[A/X], respectively. 

Proof. The claims (la) and (lb) are shown simultaneously by induction on ||C||x and ||D||x- The 
claims (2a) and (2b) are shown by using (la), (lb), and Proposition [3JJ] □ 
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The following proposition is obtained as a special case of the above lemma. 

Proposition 3.15. Assume X is in Pos(C). The following are derivable: 

r.jc : A h A | M : B K: A \ T h A,a: B 

T, z : C[A] h A | mono*£ x : C[B] monog aK {fi) : C[A] \ T h A,/3: C[B] 

Definition 3.16. We define the one-step reduction relation — > DCjUV of DQuv as the compatible closure 
of the reduction rules of DC and the following reduction rules: 

(Bp) in» x - c (M) • itr£[ff, L] — > DQuv (M • monojc { itr^jS], £ }).a • L, 
OSv) coitr^ <M, N) • out vZC [£] — > D q*v # • x.(mono'f;^ c ,{ coitr^<M, z), M) • K). 
This system has subject reduction. 
Proposition 3.17 (Subject reduction of DC/jv). The following claims hold. 

(1) Ifr 1-dquv A | M : A and M — > DCjUV N, then T h DC/iV A\N: A holds. 

(2) If K : A | T 1-dqjv A AMii — > DC ^ y L, then L : A | Y h DCjUV A /jo Ids. 

(3) Tjf T | S h DC/iV A c??iJ 5 — >dc//v T 7 , f/zen T | T h DC/iV A 

Proof. They are shown simultaneously by induction on the generation of — >dquv using Lemma [3~4l 
[331 [S3 and [37141 We consider the cases of (fin) and (fiv). 

Case of (fin). Assume T \ irf xc (M) • itr^[K, L] h A is derivable in DC/iv. We use // and C[A] 
as abbreviations of fiX.C and C[A/X], respectively. The last rule of the derivation must be (Cut) 
rule. Then T h A | irf xc (M): D and itr£[K,L] : D \ T h A are derivable for some type D. Since 
the last rules of these derivations must be (/uR) and (jiL), we obtain D is fiX.C, and the derivations 
of T h A | M: C[p.], the judgment K: C[A] \ T h A, a: B, and L: A \ T h A, a: B. Hence we have 
itr*[K,8] : | T h A, 6: A by (AxL) and OuL) rules, and then monoj^f itr^^yS], ^ } : C[]A \ T h 

A, a : A is derivable by Lemma l3. 141 Therefore we have T | (M»mono^^{ itr^[^,jS], K )).a»L h A 
by using (//?), (Cut) rules. 

The case of (fiv) is shown similarly to the case of (fi/u). 

The other cases are straightforwardly proved by the induction hypothesis. □ 
The duality transformation (-)° preserves reduction. 

Theorem 3.18 (Duality of DQuv). D — > DC/iV E implies (D)° — > DC//V (E)° for any expressions D 
and E. 

Proof. This is proved by induction on the generation of — >dc^v D 

Proposition 3.19. IfD — >vc MV E is the rules (Bp) and (fiv), then (D)° — >dc,uv (E)° is (fiv) and (Bp) 
respectively. 

We have shown the duality of inductive types and coinductive types. Proposition 13.1 II and 
Theorem 13.181 show that the duality transformation is a homomorphic involution. The description 
of a type can be defined as the set of the type itself, its terms, its coterms, and their reduction. The 
duality transformation maps the description of an inductive type and that of a coinductive type to 
each other. That is, we have the following. (1) Definition 13.71 shows that the inductive type pX.A is 
mapped to the coinductive type vX.(A)° , the term constructed by in for the inductive type is mapped 
to the coterm constructed by out for the coinductive type, and the coterm constructed by itr for the 
inductive type is mapped to the term constructed by coitr for the coinductive type. (2) Proposition 
!3.19l shows that the cut elimination procedure of the inductive type is mapped to the cut elimination 
procedure of the coinductive type. (3) the coinductive type is mapped to the inductive type in a 
similar way to (1) and (2). 
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Remark 3.20. We cannot define our typing system by using 

K : C[A/X]\T\- A,a : A , r „ 

a (m*- ) 

itr*[K,fi] :/jX.C\YhA,B:A 

instead of the typing rule QiL). If we used (juL'), the set of terms would not be closed under sub- 
stitution, because itr£|X,L] would not have typing rules for it and hence it would not be a term, 
though it is obtained from itr^[K,B] by substituting L for 8. 



4. Examples 

In this section we show some examples of inductive and coinductive types in DC/iv. Let X be a 
distinguished type variable. We use the following abbreviations: 

T = -iXo V X Q , ± — ->X A Xq, and * - Ax.x. 

The type Nat of natural numbers can be represented by: 

Nat = fiX.(T V X), 

= in Nat <<*>inl), 

succ(M) - in Nat ((M)inr), 

where ® is the zero and succ is the successor. We can prove r h A | ®: Nat. We can also 
prove T h A | succ(M): Nat from r h A | M: Nat. The «-th natural number h is rep- 
resented by succ(succ(. . . succ(O) . . .)) (n times of succ). We will write M[_/x] n (N) for 
M[M[. . . [M[N/x] /x\... /x] /x] (n times of M). We define a coterm Itr B [F, N, K] of type Nat by 
itrf [ \y.(N • a), x.{F • (x@a))], K], where y is not free in N, the term F has type B D B, and and 
K are of type B. When the coterm Itr B [F, N, K] gets n as its input, it computes «-time iterations 
of applying the function F to N, and passes the output to K. This reduces h • Itr B [Ax.M, N, K] to 
M[Jx] n (N) • K. 

The type List(A) of lists of elements of type A is represented by: 

List(A) = fiX.(T V (A A XJ), 

nil = in List(A) ( <*>inl ), 

M :: Nl = in List(A) < < (M, Nl) >inr ). 

The term nil is the empty list and (::) is the list constructor. In DQ/v, the judgment T h 
A | nil: List(A) is provable. The judgment T h A | M :: Nl: List(A) is also provable from 
T h A|M: A and r i- A|M: List(A). 

We note that the above examples can be considered under the call-by- value setting (section U} 
if we restrict terms in the above examples to values. 

We can also define the type Stream(A) of streams of elements of type A by: 

Stream(A) = vX.(A A X), 

cons(M,Ns) - coit4 AStresmiA \(7ri(x),(n 2 (x) • out Stream(A) M).cr>, (M,Ns) ), 

hd[K] = ou t Stream(A) [ £st[K] ], 

tl[L] - out Stream(A) [snd[L]], 

where n\(M) is the first projection of M defined by (M • fst[a]).a, and n 2 (M) is the second pro- 
jection of M defined by (M • snd[a]).a. The term cons(M,Ns) constructs a new stream from a 
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given element M and a given stream Ns. The coterm hdIX] receives the first element from a given 
stream and gives it to K. The coterm tl[L] removes the first element from a given stream and gives 
the resulting stream to L. We can prove T h A | cons(M, Ns): Stream(A) from T h A | M: A and 
r h A | Ns: Stream(A). We can also prove hd[K] : Stream(A) | T h A from K: A \ T h A. We can 
also prove tl[L]: Stream(A) | T h A from L : Stream(A) | Y h A. This reduces con\s(M,Ns)»hd[K] 
to M • K. We also reduce cons<M,Afr> • tl" +1 [hd[^]] to Ns • tl"[hd[^]], where tl"[hd[X]] is 
defined by tl[tl[. . . tl[hd[iC] ]...]] (n times of tl). Hence the coterm tl"[hd|X|] receives the 
n-th element of a given stream and gives it to K. Let M be a term of type A. The stream of infi- 
nite number of M is represented by coitrJ«M, x), *), where x is a fresh variable. We will write 
stream(M) for coitrJ«M, x), *). Indeed, the statement stream(M) • tl"[hd[^]] is reduced to M 
for any n. This means that any n-th element of stream(M) is M. 

We note that this stream example can be considered under the call -by-name setting (section |7]) 
if we restrict coterms in the above example to covalues. 

Proposition 4.1. Nat is dual to Stream(_L), that is, (Nat) = Stream(±), (0)° - hd[(*)°], and 
(succ<M»° = tl[(M)°] hold. 

If Stream(J.) is considered under the call-by-name setting and Nat is considered under the call- 
by- value setting, then the duality of the above proposition can be understood as follows. The type T 
means the singleton set {*}. The type _L means the type of a program that returns some answer after 
computation with the input * since _L is equivalent to -iT. The type Nat means the infinite disjoint 

sum T + T + T + The type Stream(J_) means the infinite cartesian product ixixix Since 

a term in Stream(-L) is equivalent to a coterm in Nat, when the term gets some natural number and 
is computed, it returns some answer. When the term gets the natural number h, since h is * in the 
n-th T in T + T + . . ., the term in the n-th ± in _L x J. x ... is given the input * and it is computed to 
give some answer. 

Here we can also consider examples that include non-deterministic choices. Let M and N 
be terms of same type, x be a fresh variable, a and yS be fresh covariables. We define the non- 
deterministic choice (M \ N) by 

(M | N) = ((Af • a)fi • x.(N • a)).a, 

where a and fi are fresh covariables. This term has both ifii) and (/3«)-redexes. It is reduced to 
M if the (/3«)-redex is chosen, and is reduced to ,/V if the (jSi)-redex is chosen. Thus, {M \ N) 
can be considered as a non-deterministic choice of either M or ,/V. This non-deterministic choice 
(M | ,/V) is forced to choose M under the call-by-value strategy, and is forced to choose ,/V under the 
call-by-name strategy. 

An example of non-deterministic computation is the list insertion function. This function gets a 
list as its input data, and non-deterministically chooses one arbitrary place in the list. Then it returns 
a new list that is obtained by inserting a given element at the place. 

Let M be a term of type A, and K' be a coterm of type List(A) A List(A). Then we define 
ir\s M [K'] of type List(A) by 

ins M [Z'] = itr^^^'^ttL^a),^)],^], 
Li(or) = x.((M :: nil, nil) • a), 

L 2 (a) = z.« <7Ti(z) :: nin 2 {z),ni{z) :: n 2 n 2 {z)) \ {M :: 7Ti(z) :: 7T 2 n 2 (z),7Ti(z) :: nin 2 {z)) ) • a) 

where x occurs in L\(a) is a fresh variable of type T, and z occurs in L 2 (a) is a fresh variable of 
type A A (List(A) A List(A)). Then if Nl is a list and Nl' is a list obtained by inserting M in some 
place of Nl, then the statement Nl • insA/D^'] can be reduced to (Nl',Nl) • K' . We can show this 
by induction on the length of Nl. If Nl is nil, then Nl' is M :: nil. The statement nil • itismIK'] 
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is reduced to (M :: nil, nil) • K' . If Nl is N :: Nl , then Nl' is either N :: Nl' Q or M :: N :: M , 
where Nl' Q is an inserted list obtained from Nlo- The statement (N :: Mo) • ins^L^'] is reduced to 
({N, (Nlo»ins M [y\)-7)»L2(a)).a* K' . Then this statement is reduced to ((N, (Nlo,Nl' ))»L 2 (a)).a» 
K' by the induction hypothesis. We have ( (N :: Nl' ,Nl) | (M :: N :: Nl Q ,Nl) ) • AT'. Hence we can 
obtain (M :: iV :: Nl Q ,Nl) • or (M :: N :: M ,M) • K'. 
Let be a coterm of type List(A). Here we define 

insertMffl - ins M [f st[X]]- 

Then the statement Nl • insertM^] is reduced to Nl' • A' for any inserted list Nl' obtained from 
Nl. 



5. The Second-Order Dual Calculus DC2 

We consider the second-order extension DC2 of DC given by Tzevelekos |[26l . He showed the basic 
properties of DC2, such as the substitution lemma and subject reduction. Without formal discussion, 
he also mentioned that his translation from DC into the symmetric /l-calculus can be extended to 
the second-order case. In this section, we give a formal definition of the second-order translation 
from DC2 into the second-order symmetric /l-calculus, and show the strong normalization of DC2 by 
using this translation. For this puipose we will use the strong normalization result of the second- 
order symmetric /l-calculus given in Ell . 

Definition 5.1. An expression is defined to be strongly normalizing if there does not exist any 
infinite reduction sequence stalling from the expression. 

First, we define a second-order extension DC2 of DC. 

Definition 5.2 (DC2). The types, terms, coterms, and statements of DC2 are defined by: 

Types A ::= X \ A A A \ A V A \ -A \ VXA | 3XA, 

Terms M ::= x \ (M, M) \ (M)inl | (M)inr | [K]nol \ (S).a | <M)a | <M)e, 
Coterms K ::= a | [K,K] | fst[K] \ snd[K] | not(M) | x.(S) \ a[K] \ e[K], 
Statements S ::= M • K. 

The typing rules and reduction rules (denoted by — > DC 2) of DC2 are defined by extending the rules 
of DC with the following rules: 

r h A | M : A m K-.AjB/XllT.A m 



T h A | <M)a : VZA a[K] : VXA | T h A 

Th A\M:A[B/X] K : A\V \- A 

T h A | <M)e : 3X.A e[K] : 3Z.A \ T h A 

CSV) <M)a • a[K] ^ DC2 Af • K, 

063) (M)e • e[K] ^ DC2 M • K, 
where Z is not free in T and A in (V/?) and (3L). We write — >^ c2 to denote the transitive closure of 

>DC2- 

We have the new constructors a and e, which are trivial witnesses for the quantifiers at the 
level of expressions, so that the system has subject reduction. We choose our DC2 so that it does 
not contain type information in expressions, since our puipose is to show strong normalization of 
the second-order dual calculus, and in general the strong normalization of the system with type 
information is implied by the strong normalization of the system without type information. 
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We sometimes use the symbol i-dc2 instead of the symbol h that appears in a judgment in order 
to explicitly show it is a judgment of DC2. That is, we write T h DC2 A | M : A for the judgment 
r h A | M : A. Similarly, we write K : A | T h DC2 A and T \ S h D c2 A. 

We write T[B/X] for x x : C\ [B/X], ...,x n : C„[B/X] if T is x\ : Ci x n : C n . We also write 

A[5/X]] for a, : D^B/X], . . . ,a m : D m [B/X] if A is a x :D U ..., a m : D n . 

Lemma 5.3. The following claims hold. 

(1) IfT h DC2 A | M: A, then T[B/X] h DC2 A[B/X] \M: A[B/X] holds. 

(2) IfK: A\T h DC2 A, then K: A\ T[B/X] h DC2 A[B/X] holds. 

(3) IfT | S h DC2 A then T[B/X] \ S h DC2 A[B/X] holds. 

Proof. They are shown simultaneously by induction on expressions. □ 

The basic lemmas for DC and DC/iv are also shown in DC2. We use Lemma [531 to show weak- 
ening lemma. 

Lemma 5.4 (Weakening lemma). Let T c T' and A c A'. Then the following hold in DC2. 

(1) If r h A | M : A is provable, then T' h A' | M : A holds. 

(2) If K : A \ T I- A is provable, then K:A\T'\-A' holds. 

(3) IfT | S h A is provable, then T' \S h A' holds. 

Proof. They are shown simultaneously by induction on M, K, and S . We use Lemma [531 when we 
show the cases of (M)a and e[K]. We consider these cases. 

The case of (M)a. Assume T c T', A c A', and T h A | (M)a: A is derivable. Since the last 
rule of the derivation must be (V/?), we have A is VX.B for some B, the variable X is not free in T 
and A, and T h A | M: B is derivable. Then we have T h A | M: B[Z/X] for a fresh type variable Z 
by using Lemma [531 By the induction hypothesis, T' h A' |M: B[Z/X] holds. Therefore we obtain 
fhA'l <M)a : VZ.(B[Z/Z]) by (V7?) rule, since Z is not free in T' and A'. 

The case of e[K] is shown similar to the case of {M)a. 

The other cases are straightforwardly proved by the induction hypothesis. □ 
Lemma 5.5. Let T' c T and A' c A. Then the following hold in DC2. 

(1) IfFV(M) c dom{T') and FCV(M) c dom(A'), then T h A | M: A implies T' h A' | M: A. 

(2) IfFV(K) c Jom(r') a?i<i FCV(i<:) c dom{A'), then K: A \ T h A j/npZiej A": A | T h A'. 

(3) IfFV(S) c Jom(r') W FCV(5) c dom{A'), then T \ S h A imp/iej P | 5 h A'. 

Proof. They are shown simultaneously by induction on M, K, and 5 . □ 

Lemma 5.6 (Substitution lemma). The following claims hold. 

(1) Suppose T i-dc2 A | A^: A is derivable. Then the following hold. 
(la) IfT,x: A h DC2 A\M: B, then T h DC2 A | M[N/x] : B. 
(lb) If K: B\T,x: A h DC2 A, ?/ien K[N/x] : B\T h DC2 A. 

(lc) IfT, x: A 1 5 h DC2 A T 1 5 [tf/jc] h DC2 A. 

(2) Suppose L : A \ T i-dc2 A is derivable. Then the following hold. 
(2a) IfT i-dc2 A, a : A ] M : B, T h DC2 A | M[L/a] : B. 
(2b) IfK: B\T h DC2 A, : A, then K[L/a] : B\T h DC2 A. 
(2c) IfT\S h DC2 A, a : A, ^e?2 T | S [L/a] h DC2 A. 

Proof. The claims (la), (lb), and (lc) are shown simultaneously by induction on M, K, and S. The 
claims (2a),(2b), and (2c) are also shown simultaneously by induction on M, K, and 5 . □ 
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This system has subject reduction. 

Proposition 5.7 (Subject reduction of DC2). The following claims hold. 

(1) IfT h D c2 A | M : A and M — > DC2 N, then T h DC2 A\N: A holds. 

(2) IfK : A | T H DC 2 A and K — » DC 2 L, then L : A \ V h DC 2 A holds. 

(3) If T | S h DC 2 A and S — >dc2 T, then T \ T h DC 2 A holds. 

Proof. They are shown simultaneously by induction on the generation of — > DC 2 using Lemma 1531 
E3E5J andEU We show the cases of 06V) and OSB). 

The case of (j3V). Suppose T | (M)a • a[K] h A is derivable. Then T h A | <M)a: C and 
a[K] : C | T h A are derivable for some type C. Since the last rules of these derivation must be (V/?) 
and (VL), we have C is VXA for some A, X is not free in both T and A, and T h A | M : A and 
£ : | T h A are derivable for some B. Then we can obtain T h A | M : A[B/X] by Lemma [531 

Therefore T \ M • K h A can be derived by (Cwf) rule. 

The case of (83) is shown similar to the case of (/3V). 

The other cases are straightforwardly proved by the induction hypothesis. □ 

Remark 5.8. The trivial witnesses a and e are necessary for the subject reduction. If we did not 
have these constructors, the subject reduction would fail. If we chose the following (V/?') and (VL') 
instead of (V/?) and (VL), 

T h A | M : A K-.AIB/XI W^A 



T h A | M : VZ.A v 7 # : VX.A | T h A 

then the following would be a counter-example: we would have T | (* • £st[a]).a • 8 \- A where T 
is x : X A F, the sequence A is /3 : VZ.X, and Z + X,Y, but would not have T | x • f st[/3] h A, though 
(x • £st[a]).a • 8 is reduced to x • f st[/6]. 

In /l-calculus the constructor a is not necessary for subject reduction while the constructor e is 
necessary for it [25 :]. In our system, since V and 3 are dual, the constructor a is also needed. 



The duality transformation can be extended from DC to DC2. 

Definition 5.9 (Duality Transformation). The duality transformation for types, expressions, and 
inference rule names of DC2 is defined by those of DC and the following equations: 

(VXA)° - 3X.(A)°, (3XA)° = VX.(A)°, 
«M>a)° - e[(M)°], (e[K])° = <(*)°>a, 
«M>e)° = a[(M)°], (a[tf])° - ((K)°)e, 

(V/?)° = (3L), (3L)° = (W0, (VL)°-(B/?), (3/?)° = (VL). 

This duality transfomiation presei-ves substitution of types, terms, and coterms. 

Lemma 5.10. Let A and B be types, D be an expression, M be a term, and K be a coterm of DC2. 
Then the following hold. 

(1) (A[B/X]f = (A)°[(fl)°/X]. 

(2) (D[M/x])° = (D)°[(M)° I xf\. 

(3) (D[K/a])° = (D)°[(Ky/a']. 

Proof. The claim (1) is shown by induction on A. The claims (2) and (3) are shown by induction on 
D. □ 
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The extended duality transformation preserves typing and reduction. It is an involution in DC2. 
Proposition 5.11 (Duality of DC2). The following claims hold. 

(1) If J is derived from J\, . . . ,J n (n = 1 or 2) by an inference rule R, then (J)° is derived from 
(J n )°, ■ ■ ■ ,(Ji)° by the inference rule (R)°. 

(2) D -^ DC2 E implies (D)° -^ DC2 (E)°. 

(3) ((A)°)° - A, ((D) ) = D, and ((7)°)° = J hold. 

Proof. The claim (1) is proved by case analysis of the inference rules of DC2. The claim (2) is 
proved by induction of the generation of — > DC2 using Lemma 15.101 The claim (3) is proved by 
induction on types and expressions. □ 

Next we give a definition of the second-order symmetric i-calculus SA2. The symmetric A- 
calculus is introduced by Barbanera and Berardi [2] as a classical extension of the i-calculus. The 
strong normalization of its second-order extension SA2 is proved by Parigot ET1 using the reducibil- 
ity method. The particular system we consider here is an extension of Parigot's system with two 
additional rules (n r and 77/). As discussed in ibid., Parigot's proof works with this variant without 
problem. 

Definition 5.12 (5/12). We define the second-order symmetric /1-calculus SA2. The types of SA2 are 
either the special type _L or m-types (denoted by r, cr, . . .) given by: 

r ::= X I X 1 - I r x r I r + t I VX.r I 3X.T 

where X, Y, . . . range over type variables. The types VX.r and 3X.t bind X in r. The negation (t) -1 
of r is defined by: 

(X) ± = X ± , (X ± ) ± - X, 

(T X cr) 1 - - (T) 1 - + (CT) X , (T + a) 1 - - (t) 1 X (^) X , 

(VX.t) 1 - 3X.iT) 1 , (3X.T) 1 - VXXt) 1 . 

The symbols x, y, . . ., a, ft, . . . range over variables. The terms of SA2, denoted by t, u, . . ., are defined 
by 

t ::= x I inj^O I inj 2 (0 \ (t,t) \ t * t \ Ax.t \ a(t) | e(f). 

The one-step reduction relation — ^2 of SA2 is defined as the compatible closure of the fol- 
lowing rules: 

(fi r ) (Ax.t) * u — >sxi t[u/x], (fit) u * (Ax.t) — > SA2 t[u/x], 

(fi x+ l) (h,t2> * inji(tt) — >sA2h*u, (fi+xV inj'i(M) * (h,t 2 ) — >snu*h, 

(fi x+ 2) (ti,t 2 ) * inj 2 (w) — >sa2 h * u, (fi+ x 2) inj 2 (w) * (h,t 2 ) — >s,u « * h, 

0S V3 ) a(t) * e(u) — > SA2 t * u, 0S 3V ) e(u) * a(t) — > SA2 u*t, 

(■q r ) Ay.(y * t) — >sa2 t, (?7/) Ay.(t * y) — > SA2 t, 

where y is not free in t in (77/) and (77, ). 



20 



D. KIMURA AND M. TATSUTA 



A typing context (denoted by T, A) is a finite set and of the form xi : T\,...,x n : r n . A judgment 
of SA2 takes either the form T \- t : t or T \- t : ±. The typing rules of SA2 are defined as follows: 

(Ax) FTITTTT^X ( abs ) FTTT^ ( a PP) 



r,jc:Thi:r T h /lx.? : (t)- 1 - r h t * u : ± 

Thf.Ti f h t : t fm :g- , , 

V + lV /-.• 1 1\ T"" i ,.\ . _ _ l X J 



T h inj ( (0 : n + r 2 (/ =1,2) r I- (t, u) : t x cr 
r h f : t ^ r h ? : rhx/X] .... 



r h a(?) : VXr v ' (X is not free in T) T h e(f) : 3X.r 

Theorem 5.13 (Strong normalization of SA2 lETTl ). £Wry typable term is strongly normalizing in 
SA2. 

We will give a reduction-preserving and type-preserving translation from DC2 into SA2. Our 
translation is a second-order extension of the translation from DC into the symmetric /t-calculus 
given by Tzevelekos |[26l . 



Definition 5.14. Let A be a type of DC2. The type (Ay of SA2 is defined as follows: 

(X) 1 " = X, (A A B) 1 " = (A) 1 " x (B) t , (A V B) t = (A) 1 " + (B)*, 

(-iA) t - ((A) t ) ± , (VXA) 1 " - VX(A) 1 \ (3XA) f - BX^A) 1 ". 

Let D be an expression of DC2. The term (D) + of SA2 is defined by: 

(x) + = x, (a) 1 " = a, 

((5).a) t = ^a.(5) t , WS)) 1 = ix.(S) f , 

«M)a)t - a((M)t), «M>e) t = e((M)t), 

(e[X])+ - aP)f), (affl)f = e((Z)+), 

«M>inl)t = inj!((M)t), (fst[Z])t = in;h((X)t), 
«M)inr)t - inj 2 ((M)t), (snd[Z])t = inj 2 ((Z)t), 
«M,^))t = ((M) 1 ',(A^) t ), - ((^(L) 1 ), 

([JTInot) 1 ' - ,ix.(x * (^) + ), (not(M)) t - (M) 1 ", 
(M • A') t = (M) f *(K)^. 

We define the translation of [X]not by using ?7-expansion, so that all reductions in DC2 are strictly 
simulated in SA2. 

(r) t and ((A)V are defined as Xl : (Atf, . . . , x n : (A,,) 1 " and orj: ((BOV, • • • ,<* m : ((SjV 
respectively if T is xi : A\, . . . , x n : A n , and A is a\ : B\, . . . , a m : B m . For a judgment / of DC2, 
the judgment (Jy of SA2 is defined as follows: The judgment (T h A | M: Ay* is defined 
as (T) 1 ",((A) t )- L h (M) f : (A) 1 ". The judgment (K: A \ T h A) 1 " is defined as (T) t ,((A) t )- L h 

: ((A) 1 ")- 1 . The judgment (T|5 h A) 1 " is defined as (T) 1 ", ((A) 1 ")- 1 h (S) 1 " : J_. 

This translation preserves provability and one-step reductions. 

Proposition 5.15. The following claims hold. 

(1) If J is provable in DC2, then (Jy is provable in SA2. 

(2) D ^ DC2 E implies (D)* ^ SA2 (E)\ 

Proof. The claim (1) is shown by induction on the proof of /. The claim (2) is shown by induction 
on the definition of — > DC 2- □ 
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We can obtain strong normalization of DC2 from the above proposition. 

Theorem 5.16 (Strong normalization of DC2). Every typable expression is strongly normalizing in 
DC2. 

Proof. Assume there is an infinite reduction sequence 

D = Do — > DC 2 D\ — > DC 2 . . . 
starting from D. From Proposition 15. 151 the expression (D)* is typable in SA2, and 

(£>) f ~^SA2 (£>l) f — >fiB ■ ■ ■ 

is an infinite reduction sequence. This contradicts Theorem 15.131 □ 

Remark 5.17. Tzevelekos f26l also gave a back translation from the symmetric /l-calculus 
into DC. As noted in his paper (Section 3, Note 3.5), this translation cannot extend to the second- 
order case since it does not preserve typing judgments for existential quantification. This is because 
the translation (-) p does not preserve type substitution: (A[B/X]) P + (A) P [(B) P /X]. The same 
argument applies to ours. 



6. Strong Normalization of DQuv 

In this section, we prove strong normalization in DQuv. We will give a translation from DQuv into 
DC2 that is based on the second-order encoding of inductive and coinductive types. Our proof of 
strong normalization will be done by showing the fact that one-step reduction in DQuv is translated 
to one or more steps reduction in DC2. 

We use the following degree of expressions in DQuv for defining the second-order coding of 
inductive and coinductive types. 

When we try to prove some properties of expressions by induction on expressions, that indue- 

X c 

tion sometimes does not work, since the expression contains mono A ' BjrM {A r j that is defined by using 
induction on ||C||x- In order for solving this, we will introduce the pair of the summation of ||C||x 
and the size of an expression as a measure. 

Definition 6.1. Let D be an expression in DQuv. The number ||D|| is defined by: 

Ml = INI = 0, 

\\{M,N)\\ = ||coitr£(M, AOH - max(||M||, ||jV||), 

||M.^|=nax(pf||,Pl|), 

\\[K,L]\\ = ||itr^,L]|| =max(||£||,||L||), 

||(S).a|| = ||jc(5)|| = PII, 

||<M)inl|| = ||<M>inr|| = ||not<M)|| = ||M||, 

||in^- A <M>|| = ||M|| + ||A|| x + l, 
HfstfflH = ||snd[Z]|| - ||[Z]not|| = \\K\\, 
\\out vXA [K]\\ = \\K\\ + \\A\\ x + l. 
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The number \D\ is defined by: 
W = \a\ = 0, 

\{M,N)\ = |coitr^<M,A^>| = |M| + \N\ + 1, 
\M»K\ = |M| + |A"| + 1, 
\[K,L]\ = \itr*[K,L\\ = \K\ + W + l, 
ICS).a| = |*.GS)| = |,S| + l, 

|<M)inl| - |<M>inr| - |not(M)| - \iif XA (M)\ = \M\ + 1, 
\£st[K]\ = \snd[K]\ = \[K]not\ = \out vXA [K]\ - \K\ + 1. 

The degree deg(D) of the expression D is defined as the pair (||D||, \D\). We also define the order of 
the degrees by the lexicographic order. 

The number \D\ is the number of constructors in the expression D. The number ||D|| is the 
maximum summation of (\\A\\x + 1) for irf XA {M) and out vXA [iT] in paths in D. For example, 
deg(in^ ^ vX («[x«A;)inr • y)]not)inl • y).y» - (4, 7). We have \\E\\ < \\D\\ and \E\ < \D\ when 
the expression E is a proper subexpression of D. The degree satisfies the following properties. 

Lemma 6.2. The following claims hold. 

(1) ||D|| = ||(D)°|| and \D\ = \(D)°\ hold. 

(2) ||monof A JM, N} \\ < \\M\\ + ||iV|| + \\A\\ X holds. 

(3) deg(in^ A (M)) > degCmono^ Ya { x.(y • {x@a)),f3}) holds. 

Proof. The claims of (1) are shown by induction on D. The claim (2) is shown by induction on 
\\A\\x- The claim (3) is proved by using (2). □ 

We present the second-order encoding for DQuv. We will write A(x, a).S for Ax.((S).a). Then 
(A(x, a).S) • (N@K) is reduced to 5 [N/x][K/a]. 

Definition 6.3 (Translation (-) from DQuv into DC2). Let A be a type of DQuv. The type A of DC2 is 
defined as follows: 

x = x, aTTs -Jab, ^ = -.1, ~aVb = avb, 

fiX.A - VX.((A dX)d X), vX.A = 3X.(-.(-.A A X) A X), 

where D is defined in Defrnition |2.9i For an expression D of DQuv, the expression D of DC2 is defined 
by induction on deg(D) as follows. For the expressions D of the same degree, we first define D for 

D such that D is not of the form out yXA [X] or coitr A (M, N), and we next define D for D such that 

D is of the form out vX A [K] or coitr A (M, J 'V>. 



x 



-V, 



a 



a. 



(S).a 
(M, N) 
<M)inl 
(M)inr 



[^]not 



(M,N), 
(M)inl, 
(M)inr, 
[F]not, 



[K,L] 
fst[^] 
snd[Z] 
not<M) 



i(S), 

[K,Ll 

£st[K], 

snd[^], 

not(M>, 
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M • K - M • K, 

itr A [K,L] = a[(A(x,a).(x*K))@L], 
out vXA [K] = (in^ Ar ((K)°))°, 

irf XA (M) = ( A(y,B).(y . ( (Q Y [XA] • K M {y, y}).y@B )) )a, 
coitr^(M,AT) = (itr^ )0 [(M)°,(A^) ]) , 

where Q Y [X.A] is denned as Ay.A(z,B).(z»morio XA A Y J x.(y • (x@a)),B } ), and HmIN, K] is denned 

as ( A(x, a).(x • a[N@a]) )@(M@K). 

We also define the translation of judgments. The context T is defined as x\ : A\, . . . ,x n : A n if T 
is x\ : Ai, . . . , x n : A n . The cocontext A is defined as at\ : B\, . . . , a m : B m if A is a\ : B\, . . . , a m : B m . 
The judgment T h A | M: A is defined as T h A | M: A. The judgment K : A \ V h A is defined as 
K : A | T h A. The judgment T\S h A is defined as T | 5 h A. 

The next lemma shows that this translation commutes with (— )°. 

Lemma 6.4. (A)° = (A)°, (D)° = (D)°, and (7)° = (J)° hold. 

Proof. The claim for A is proved by induction on A. 

The claim for D is proved by induction on D. The cases of in» XA (M), out vXA [K], itr%[K,L], 
and coitr A (M, AO are shown by the definition of the translation and the dualities of DQuv and 

DC2. The case of ii f XA (M) is sh own as follows: {itf XA (M))° = (in^ X((A)T <((M)°) »° - 
out vX -W[(Af)°] - (in /iXA <M»°. We can show the cases o\xX vXA [K\ itr A [#,L], and 
coitr A (M, AO similarly. The other cases are straightforwardly proved by the induction hypothe- 
sis. 

The claim for / is proved by using the claims for A and D. □ 

The translation (-) preserves substitution. 

Lemma 6.5. A[B/X] = A[B/X], D[N/x] = D[N/x], and D[L/a] = D[L/a] hold. 

Proof. The first claim is shown by induction on A. The second and the third claims are shown 
simultaneously by induction on deg(D). For the expressions D of the same degree, we first show 

the claims for D such that D is not of the form out vXA [K] or coitr A (M, AO, and we next show the 

claims for D such that D is of the form out vXA [X] or coi 

We consider the cases of in^ XA (M>, itr A [K,L], out vXA [^T] and coitr A (M, N). The other 
cases are straightforwardly proved by the induction hypothesis. 

The second claim of the case inf XA (M) is shown in the following way. By the induction 

hypothesis, we have mono* A A Y J x.(y • (x@a)),B }[N/x] = mono XA A Ya { x.(y» (x@ a)), B)[N/x] 
since deg(mono XA AY J x.(y • (x@a)),B \) < deg(in /iXA <M» by Lemma [O (3). By 

Lemma EH (2a), mono XA A Y J x.(y • {x@a)),B }[N/x] = mono* A A y J x.(y • (x@a)),B }. Hence 
we have (Q Y [XA])[N/x] = Q ¥ [X.A]. By the induction hypothesis, we have < R M {y,y}[N/x] = 

f<M[Nix}{y,y) since deg(M) < deg(in^ XA (M». Therefore, irf XA (M)[N fx] is equal to < A(y,B).(y • 
«(Qy[XA])[N/x] • CR M {y,y})[N/x]).y@B)))a. Then it is equa l to (A(y,B).(y • ((Qy[X.A] • 
f<M[Nix\{y,y\-y@B)) >a. The last term is equal to (in /jXA (M))[N '/ 'x] by the definition of (-). 
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The second claim of the case itr^[K, L] is shown in the following way. The coterm 
itr%[K,L][N/x] is equal to a[(A(y,a).(y • K[N/x]))@L[N/x]]. By the induction hypothesis, 
it is equal to a[(A(y,a).(y • K[N/x]))@L[N/x] ]. Hence it is equal to (itr A [K, L])[N / x] by the 
definition of (-). 

The second claim of the case out vXA [X] is shown in the following way. Since ||^|| = ||(X) || 
and \K\ = \(K)°\ by Le mma [p (1), w e have deg(out vXA [^]) - deg(in^ X(A) °<(X) ». Hence 

iTf Xt( - A) °((K[N/x\)°) = irf x w \(K)°)[(Nj°/x'] holds by Lemma EBB since the third claim for 
j_ n fiX.(A) j s already shown before this case. Then we can obtain the claim of this case as 
follows: 

(out vXA [K] )[N/x] = (in^ X(A) °((X[A7*]) >) = (in^ x(A) °<(20°)[(^/;t'])° 
( in^- (A)o <(i0 o >) o [((W7*] = out vXA [K][({N)°)°/x] = out vXA [K][N / x]. 

The third claim of this case is shown similarly. 

The second and third claims of the case coitr A (M, N) is shown in the similar way to the case 
of out vXA [K]. □ 

Note that the second and third claims of the above lemma cannot be proved straightforwardly 
by induction on D. For example, for proving the case of ir^ XA {M) in the second claim, we need 
induction hypothesis for mono^ A A Ya { x.(y • (x@a)),B) but it is not a subterm of ir^ XA {M). 

The next proposition says the translation (-) preserves provability. 
Proposition 6.6. If J is provable in BCpv, then J is provable in DC2. 

Proof. This is shown by induction on the degree of the principal expression in /. We show the cases 
of in^ XA (M>, out vXA [K], itr^L], and coitr A (M, N). 

The case of itr^[K, L] is shown by the induction hypothesis and Lemma [631 The cases of 
coitr A (M, ,/V) and out vXA [K] are shown by the induction hypothesis and the dualities of DCpv and 
DC2. 

We prove the case of i.rf(M). We write fi, A[B], and A[C] as abbreviations of /jX.A, 
A[B/X], and A[C/X] respectively. This case is shown by the following three steps: (a) we show 
RM{y,y}- (M 3 Y) D A[Jl]_p A[Y] | f,y: A[Y] d Y h A,y: A[Y] is derivable, where My,^ is 
(A(x,a).(x • a\y@a]))@(M@y). Next, (b) we show h | Q Y [X.A]: (Jl D Y) D A\JH D A[Y] 
is derivable, where <3y[XA] is Ay.A(z,B).(z • mono^ A Ya { x.(y • {x@a)),B } ). Finally, (c) we can 

easily show Y h A | irf(M) : p from (a) and (b). 

The claim (a) is shown in the following way. Suppose Y h A | in /J (M): p is derivable. Then 
we have the derivation of T h A | M: A[p]. By the induction hypothesis and Lemma [631 we obtain 
r h A | M: A\JI]. Then we have a derivation of M@y: A\Jl] D A[Y] \ Y h A, y: A[Y] by (d L) rule. 
On the other hand, we can show y: A[Y] D Y h | A(x, a).{x • a[y@a]): p D Y. Then we have 
<R M {y, J) : 07 3 Y) d A\J1] d A[Y] \T,y: A[Y] d Y h A, y : A[Y]. 

The claim (b) is shown as follows. We can show mono^^j x.(y • (x@a)),B } : A[p] \ y: p D 
Y \- B: A[Y] in DQuv by using Lemma f3. 141 the judgment x.(y • (x@a)): p \ y: p D Y \- 
a: Y,B: A[Y], and B: A[ju] \ y: p D Y I- B: A[Y]. By Lemma (3) , we have deg(in' iXA <M» > 

deg(mono XA a { x.(y • (x@a)),B}). Hence mono^f x.(y • (x@a)),B): A\Ji] \ y: Ji D Y h B: A[Y] is 
derivable by induction hypothesis and Lemma [63] Therefore we obtain h | <3y[X.A] : (p D Y) D 
Am DA [7]. 

The other cases are straightforwardly proved by the induction hypothesis. □ 
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The translation (-) maps one-step reduction to one or more steps of reduction. 
Proposition 6.7. For expressions D and E of DCpv, the relation D — >DQiv E implies D — >^ c2 E. 



Proof. First we show the claim without (ftp) nor (fiv) by induction on — > DCiUV with Lemma 
Next, by using this and Lemma [631 we show the claim of this proposition by induction on — >DCpv 
We consider cases according to the reduction rule. 

The case of (J3p) is shown as follows: Suppose we have irf XA (M) • itr^[K, L]. This is 
equal to (A(y,j3).(y • ((Q Y [X.A] • K M {y,y}).y@fi)))a • a[(A(x.a).(x • K))@L]. It is reduced to 
(A(y,j3).(y • i(Qr[XA] • n M {y,y\}-J@P))) • {{A{x.a).{x • K))@L), and then we have (A(x.a).(x_* 
K))»((Q Y [X.A] • { R M {A(x.a).(x» K),y)).y@L) by more than one step reduction. Since A(x.a).(x»K) 
equals Ax.{(x • K).a), we have ((Q Y [X.A] • K M {A{x.a).(x • K),y}).y • K).a • L by (fi d). This is 
reduced to ((Q Y [X.A] • K M {A(x.a).{x • K), K}).a • I by (J3R). Here K M {A{x.a).{x • K), K] is equal to 
(A(y,/3).(y • itrf [K,fi])@(M@K)). Hence we can reduce Q Y [X.A] • R M {A(x.a).(x • K),K] to M • 
mono^ a {itr^[^T,y6], K] by using Lemma [631 and the first claim. Therefore the previously obtained 

expression ((Q Y [X.A]»'R.M{A(x.a).(x»K), K}).a»L is reduced to (M»mono^ A yff {itrf [K,(3], K}).a» 

L. This is equal to (M • mono^ A Fj/J {itrf [K,j3],K)).a • L. 

The case of (J3v) is shown by using the duality of (fiv) and (fip), the duality of DC2, and 
Lemma |6"7fl 

Other cases are shown straightforwardly. □ 
Finally, we complete a proof of strong normalization of DCpv. 

Theorem 6.8 (Strong normalization of DCpv). Every typable expression of DCpv is strongly normal- 
izing. 

Proof. Assume that D is typable in DCpv and there is an infinite reduction sequence 

D >DQiV Dl ^DQ/v • ■ ■ 

starting from D. Then D is typable in DC2 by Proposition 16.61 and 
T) .+ 7T" » + 

^DC2 ' DC2 ■ ■ ■ 

is an infinite reduction sequence starting from D by Proposition [6/7] This contradicts Theorem 15 .161 

□ 



7. The call-by- value and call-by-name DCpv 

The motivation for introducing the dual calculus in ||27l was to show the duality between call- 
by-value and call-by-name. In this section, we follow this motivation. That is, we will extend 
the duality to inductive and coinductive types by introducing the call-by-value and call-by-name 
variants of DCpv. These variants also satisfy the important properties such as strong normalization 
and the Church-Rosser property. 

We recall the definition of the call-by-value and call-by-name DC. The call-by-value and call- 
by-name dual calculus use the notion of values and covalues. They are defined as follows. 
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Definition 7.1 (Values and covalues of DC G71 ). The values (denoted by V, W, . . .) and covalues 
(denoted by P,Q,.. .) of DC are defined by the following grammar: 

V ::= x | (V, V) | (V)inl | (V)inr | [X]not, 
P::=a\ [P,P] \ fst[P] \ snd[P] | not(M), 

where M is a term and K is a coterm of DC. 

The types, expressions, and typing rules of the call-by-value and call-by-name DC are the same 
as them of DC. The call-by-value reduction relation of DC is defined as follows. 

Definition 7.2 (Call-by-value reduction rules of DC). The call-by-value reduction relation — >p C of 
DC is defined from the following rules. 

0SAi) v (V, W) • £st[K] — V • K, 

08A 2 ) V (V, W) • snd[K] — >£ c W • K, 

08Vi) v (V)inl. [K,L] -^l c V*K, 

08v 2 ) v <W>inr . [K, L] — W • L, 

C8-.)v [A^not • not(M) -^ V DC M • K, 

(J3R)v (S).a»K^ v 0C S[K/a], 

(J3L)v V»x.(S)^l c S[V/x], 

(<TAi) v (At, AT) — (At • x.{(x,N) • <*)).«, 

(<TA 2 ) V (V, At) — (At • x.«K x) • a)).ar, 

(5-Vi) v (At)inl ^ c (At • x.«x)inl • a)).a, 

(fV 2 ) v (At) inr — (At • x.((x)inr • a)).a, 

(r]R)+ M — >' DC (M • a).a, and 

(77D+ K^ DC x.(x»K), 

where At is not a value, and x and a in (^Ai) v , (^A 2 ) v , ($Vi) v , (<rV 2 ) v , (rjL)* and (t]R)* are fresh. 

An example of use of ^-rules is 

((5).or)inl — >k ((S).a • x.((x)inl ./3))./3 — >k (5[x.((x)inl • {3)/a])./3. 

This system is obtained from the call-by-value dual calculus given in E71 by removing the implica- 
tion. 

We note that the original system in E71 includes implication types, values for implication, and 
a call-by- value /3-rule for implication. However, as mentioned in ETl . an implication Ad8 can be 
defined as -i(A A -<B) under call-by- value. Hence each value for implication can be replaced a value 
in terms of other connectives, and the reduction rule for implication can be simulated by the other 
/3-rules. 

The rules (^Ai) v , (^A 2 ) v , (<rVl)v> and ($"V 2 ) V are the separated forms of the rule (g) given in 
E71 . and our rules are equivalent to his rule. However, we prefer this separated form since this form 
is easy to add ^-rules for inductive and coinductive types later. 

The symbol + used in (r]L)^ and (rjR)^ means 77-expansion rules. When we extend call-by- 
value and call-by-name calculi with inductive and coinductive types later in this section, we will 
use the reduction (rjR) and (77L) instead of the above expansion (77/?)+ and (rjL)^ for the following 
reasons. In ETl , 77-rules requires side conditions to avoid infinite reduction sequence: "expansions 
(77L) and (ijR) should be applied only to a term M or coterm K that is not the immediate subject 
of a cut". However, two problems still remain about 77-expansion rules. One problem is that a 
value becomes non-value by the ?7-expansion: For example, a value x is expanded to a non-value 
(x • a).a by (r}R)y -rule. The second problem is that infinite reduction sequences occur with ^--rule: 
For example, (x)inl • /3 is reduced to ((x • a).a)inl • /? by (rjR)^. Since (x • a).a is not a value, 
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it can be reduced to (Cje • a).a • y.((y)inl • y)).y • B by (<rVi) v . Then, we have (x)inl • B again 
by {BL) V and (J3R) v -m\es. Tzevelekos ll26l assumed additional conditions on ^-expansion rules, and 
showed strong normalization and the Church-Rosser properties of the call-by-value and call-by- 
name DC under his conditions. However, his approach does not solve the first problem. One simple 
solution for the both problems is to replace //-expansion by //-reduction. For this reason, we will 
adopt //-reduction in our call-by-value and call-by-name systems. 

The dual calculus considered in E8l has 77-rules for conjunction, disjunction, and negation. 
These rules could be defined naturally because the system in Il28l was based on equations. However, 
we cannot define these ?/-rules naively in the call-by-value and call-by-name reduction systems of 
DC since these rules break the Church-Rosser property: The call-by-value (?/V)-rule defined in E8l 
is [jE.((jE)inl • K),y.({y)inr • K)] = K, where K has type A V B. Suppose that we add (77V)- 
reduction rule [jci.((jEi)inl»K~), X2.((*2)inr»A r )] — >Jj c K to the call-by-value DC. Then the statement 
[jci.((;ei)inl • y.(z • a)), ^•((■^inr »y.(z • a))] has two normal forms [jci .(z • a),X2-(z • a)] and 
y.(z • a). Suppose that we add (?/V)-expansion rule K — >p C [jti.((xi)inl • K), X2.((jE2)inr • K)] to 
the call-by-value DC. The statement x • y.{z • a) (the variable z and the covariable a have type X, 
and the variables x and y have type A V B) is reduced to z • a by (B^-mle. The statement x • y.(z • a) 
is also expanded to x • [xi.((xi)inl • y.(z • a)), X2-«X2>inr • y.(z • a))] by (?7V)-rule, and then it 
is reduced to x • [jei.Cz • a),X2-(z • 01)] by (/?i) v -rule. These two results are never confluent since 
the first one z • a cannot produce a coterm of the form [K, L], and the bracket [..] in the second one 
x • [jci.Cz • a), X2-(z • a)] cannot be eliminated. 

The call-by-name reduction relation of DC is defined as follows. 

Definition 7.3 (Call-by-name reduction rules of DC). The call-by-name reduction relation — >'^ c of 
DC is defined from the following rules. 

08Ai)„ (M,N) • fst[P] M • P, 

(J3A 2 ) n (M, N) • snd[P] ^ n oc N • P, 

03Vi)„ <M>inl • [P, Q] M • P, 

0SV 2 )„ <M)inr . [P, Q] ^ c M . Q, 

(B^) n [K]not • not(M) -^£ c M • K, 

(J3R)„ (S).a.P^ c S[P/a], 

(BL) n M.x.(S)^" DC S[M/x], 

(<TAi) n fst[7T] ^ c x.({x • f st[a]).a • 7C), 

(gA 2 ) n snd[7q x.((x • snd[a]).a • 7C), 

( ? Vi)„ VK, L] x.((x • [a, L]).a • <K), 

(fV 2 )„ [P, 7C] -^£ c x.({x • [P, a]).a • <K), 

(77/?)+ M (M • a). a, and 

(t/L): K x.(x • £), 

where % is not a covalue, and x and or in ($"Ai)„, C^"A2)„, (?Vi)„, C?V2)„, {t]L)* and (?//?)^ are fresh. 

This system is obtained from the call-by-name dual calculus given in |[27l by removing the 
implication. 

As mentioned in (271, an implication A D B can be defined as ->A V B under call-by-name. 
Hence, covalues for implication, and a call-by-name reduction rules for implication given in the 
original system can be replaced in terms of other connectives. 

The call-by-value reduction and the call-by-name reduction are dual strategies in DC. 
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Proposition 7.4 (Duality between call-by-value and call-by-name in DC 11271 ). Let D and E be 

expressions of DC. Then, D — >p C E iff(D)° — >p C (E)°, where (— )° is the duality transformation 
defined in the section 2. 

Now we will introduce the call-by-value and call-by-name variants of DQuv. We first consider 
a call-by-value restriction of DQuv (called weak call-by-value DQuv) which is given by simply re- 
stricting the reduction rules of DQuv. This restricted system satisfies both strong normalization and 
the Church-Rosser properties. However, this system is rather weak since it lacks the ^--rules. The 
call-by-value DQuv (denoted by CBV DQuv) is obtained by adding the ^-rules to the weak call-by- 
value DQuv. The weak call-by-name DQuv and the call-by-name DQuv (denoted by CBN DQuv) are 
also considered. The call-by-name DQuv is the dual system of the call-by-value DQuv. 

We first define the notion of values and covalues in DQuv. 

Definition 7.5 (Values and covalues of DQuv). The values (denoted by V, W, . . .) and the covalues 
(denoted by P,Q,.. .) of DQuv are defined by the following grammar: 

V::=x\ (V, V) | <V>inl | <V)inr | [K]not \ iif XA (V) | coitr^<M, V), 
P::=a\ [P,P] | fst[P] | snd[P] | not<M> | out vXA [P] | itr%[K,P], 

where M is a term and K is a coterm of DQuv. 

The set of values of DQuv is a subset of terms of DQuv. The set of covalues of DQuv is a subset 
of coterms of DQuv. Note that the above definition is a straightforward extension of the definition of 
values and covalues in DC. 

The set of values and covalues are closed under substitution of values and covalues, respec- 
tively. 

Lemma 7.6. Let V and W be values, and P and Q be covalues o/DQuv. The following claims hold. 

(1) V[W/jc] is a value o/DQuv. 

(2) P[Q/a] is a covalue of DCpv. 

Proof. They are straightforwardly proved by induction on V and P. □ 

The types, expressions, and typing rules of the weak call-by-value and the weak call-by-name 
DQuv are the same as them of DQuv. The reduction relation of the weak call-by- value DQuv is given 
as follows. 

Definition 7.7 (Reduction rules of the weak call-by-value DQuv). The reduction relation — > w cbv 
of the weak call -by- value DQuv is defined as the compatible closure of the reduction rules (fiA\) v , 
(/3a 2 ) v , (j8Vi) v , 0Sv 2 ) v , OS-.),,, (J3R) V , (J3L) V , and the following reduction rules: 

(J3fx) v in" xc (V) • itr*[K, L] ^ wCB v {V • mono*f c A/3 { itr^yS], K }).a • L, 

(fiv) v coitr A (M, V) • out vXC [^] ^ wCBV V • *.(mono^ c _{ C oitr^(M, z), M } • K), 

(t]R) v (M • a). a — >wcbv 

M, 

(t]L) v x.(x • K) — > wCB v K, 

where x and a are fresh in (rjL) v and (r]R) v , respectively. 

The reduction relation of the weak call-by-name DQuv is given as follows. 

Definition 7.8 (Reduction rules of the weak call-by-name DQuv). The reduction relation — > w cbn 
of the weak call-by-name DQuv is defined as the compatible closure of the reduction rules (J3f\\) n , 
(fi^i)n, (ySVi)„, (f3v 2 ) n , 03-0,,, Q3R),„ (J3L) n , and the following reduction rules: 
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(fin)n ixf xc (M) • itr*[K, P] ^ wCBN (M • monog; CA J itr£ K }).a . P, 

(fiv) n coitr?<M, N) • out vXC [P] -^ wCB n M • x.(monoJj XCz { coitr? <M, z>, M } • P), 

(??/?)„ (M • a). a ^„cbn M, 

(?7L)„ *.(x • K) — > wCB N K, 

where x and a are fresh in (r]L) n and (77P),,, respectively. 

The weak call-by- value reduction and the weak call-by-name reduction are dual strategies. 

Proposition 7.9 (Duality between weak call-by-value and weak call-by-name in DQuv). Let D and 

E be expressions of DQuv. Then, D — > w cbv E iff (D)° — > w cbn (E)°, where (-) is the duality 
transformation ofDCpv defined in the section 3. 

The rules (jS-i) v , (J3R) V , (r]L) v , and (r]R) v are the same as (/?-■), (J3R), (r}L), and (r]R)-mles of DQuv, 
respectively. The mles (fi/\\) v , (fi/\2) v , (ySVi) v , (jSV2) v , (jSL) v , (/3fi) v , and (/3v) v are just restrictions 
of the rules (jSAi), (/?A 2 ), (/?Vi), (/?V 2 ), and Q3v), respectively. The situation of the 

call-by-name case is similar to the call-by-value case. Hence, we can easily obtain the following 
proposition. 

Proposition 7.10. Let D and E be expressions in DQuv. Then the following claims hold. 
(\)IfD — > wCBV E, then D — > DCfJV E. 
(2) IfD — > wCBN E, then D — > DCfJV E. 

From the above proposition and the strong normalization result of DQuv (Theorem 16 .8 1 ), we have 
the strong normalization of the weak call-by-value and the weak call-by-name reduction relations. 

Proposition 7.11 (Strong normalization of the weak CBV and CBN DQuv). We have the following. 

(1) Every typable expression is strongly normalizing in the weak call-by-value DQuv. 

(2) Every typable expression is strongly normalizing in the weak call-by-name DQuv. 

The reduction relations — > wC bv and — > wC bn of DQuv satisfy the Church-Rosser property. We 
first recall the definition of the Church-Rosser property. 

Definition 7.12 (Church-Rosser property). Let A be a set and — > be a reduction relation on A. We 
write b «—£?—> c if both a — > b and a — > c hold. We also write b — > a «— c if both b — » a and c — > a 
hold. 

(1) The reduction relation — > satisfies the diamond property if, for all a,b, c e A, the relation 
b <— a — > c implies that there exists d e A such that b — > d <— c. 

(2) The reduction relation — > satisfies the Church-Rosser property if — >* satisfies the diamond prop- 
erty, where — >* is the reflexive transitive closure of — >. 

From now on, we concentrate to show the Church-Rosser property of — > w cbv- The Church- 
Rosser property of — > wCB n can be obtained from the result of — > w cbv and the duality (Proposi- 
tion |7.9b . In order to show the Church-Rosser property of — > w cbv> we will use the parallel reduction 
technique. The definition of the parallel reduction relation is given as follows. 

Definition 7.13 (Parallel reduction of the weak call-by- value DQuv). The parallel reduction relation 
(denoted by =>) of the weak call-by-value DQuv is defined inductively from the following rules. 

x => x and a => a for any variable x and covariable a. 

(M, N) => <Af ', N') if M => M' and N => N'. 

[K, L] => [K\ If] ifK^K' and L => V . 

<M>inl => (M')inl, <M>inr => (M')inr, and not(M) => not(M') if M => Af'. 
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fst[X] => £st[K'], snd[K] => snd[£'], and [K]not => [K']not if K => A"'. 
irf XA (M) => irf XA (M') if M => M'. 

out vXA [/n => out vXA [^'] if => 

coitr A (M, N> => coitr A <M', AT') if M => M' and N => N'. 

itr£[Z, L] => itrf t [K', L'\ if K K' and L => L'. 

M»K^M'»K' if M => Af' and A" => A'. 

(S).a => (S').a and x.(5) => *.(5') if 5 => 5'. 

M»jc.(S)=>S'[V/jc] if M => V and S => 5". 

(S).ar [Z'/a] if K => A' and 5 => 5'. 

<M,iV> • fst[tf] => V • X"' if Af => V, N => W, and A => X"'. 

(M,N) • snd[K] ^> W • K' if M => V, A 7 => W, and K => 

<M)inl« [Z,L] => v • ifM=>y, 

<M>inl« [Z,L] => V »L' if M^>V,L^L'. 

[Z]not • not(M> ^ M' • K' if M => M' and K =* K' . 

irt' xc {M) • itr A [A, L] => (V • mono* x c CA/3 { itr A [A',/3], A" }).o • L' if M => V, A" => A', 
and L ^> L'. 

coitr A (M,Af> • out vXC [A] => V • x.(mono^f xc .{ coitr A <M',z>, M' } • K') if M => M', 
#=> V, andA"^ A'. 

(M • a).a => M' if M => M' and a is not free in M. 
x.{x • A") => A" if K => A"' and x is not free in K. 

The parallel reduction of the weak call-by-value DQuv satisfies the following basic properties. 

Lemma 7.14. Let M be a term, V and V be values, K and A' be coterms, and D and D' be 
expressions o/DQuv. Then the following hold. 

(1) Suppose D => E. If D is a term, then E is also a term. IfD is a coterm, then E is also a coterm. 
If D is a statement, then E is also a statement. If D is a value, then E is also a value. 

(2) D^D. 

(3) IfM^V and D => D', then D[M/x] => D'[V/x]. 

(4) IfK => K' andD => D' , then D[K/a] => D'[K'/a]. 

Proof. The claim (1) is shown by induction on the definition of =>. The claim (2) is shown by 
induction on D. 

The claim (3) is shown by induction on D => D' with Lemma 17.61 We show the case that 
Ao • y-(To) => T\\Wly\ is derived from No => W and To => T\. By the induction hypothesis, we 
have N [M/x] W[V/x] and T [M/x] => T^V/x]. By Lemma|T6l W[V/x] is a value. Hence we 
have (N »y.(T ))[M/x] = (N [M/x]) • y.(T [M/x]) => TdV/x][W[V/x]/y] = T^W/yW/x]. The 
other cases are straightforwardly proved by the induction hypothesis. 

The claim (4) is shown by induction on D => D'. □ 

Lemma 7.15. Let D and D' be expressions o/DQuv. Then the following claims hold. 

(1) IfD — > wCBV E, then D => E. 

(2) IfD => E, then D — ^ E. 

(3) The parallel reduction relation => satisfies the diamond property, that is, if the relation D\ <= 
D => D2 holds, then there exists E such that D\ => E <= D2. 

Proof. The claim (1) is shown by induction on the definition of — > w cbv- The claim (2) is shown by 
induction on the definition of =>. 
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The claim (3) is shown by induction on D. We show the case that D is the shape of (S).a»x.{T), 
D[ is S'[L/a], and D 2 is T'[V/x] with the conditions 5 => S',T => T' , x.T => L, and (S).a => V. 
Recall that a critical pair in DQuv occurs in this shape. This case is most important to see that this 
critical pair is avoided in the weak call-by- value DQuv . 

From the definition of the parallel reduction and (S).a => V, we have S = M • a, M => V, and 
a is not free in M. Then, from M • a - S => 5', we have the following two cases: (i) S' - M' • a 
and M^>M' for some M', or (ii) M = (S ).j3, S' = S '[a/j3], and S => So' for some 5 and S '. 
From the condition x.{T) => L, we also have the following two cases: (a) T - x • K, x is not free 
in K, and K => L for some and L, or (b) L = x.{T") and T => T" for some 7"'. 

The case of (i). We have Di = (S ')[£/<*] - (M'»a)[L/a] = M'»L. By the induction hypothesis 
and V <= M => M', there exists a term W such that V => W <= M'. From Lemma l7TT4l (l). W is a 
value. We then consider the subcases (a) and (b). 

The subcase of (a). From the condition K => L and T = x • K, we have (x • L) <= T => 7". By 
the induction hypothesis, there exists a statement 7 such that (x • L) => 7 <= 7'. Hence we have 
Di = (x • L)[M'/x] => f[W/x] <= 7'[V/x] = D 2 from M' => W <^ V and Lemma EH] (3). 

The subcase of (b). By the induction hypothesis and 7' <= 7 => 7" ', there exists 7 such 
that 7' => 7 <= T". Hence we have D 2 = 7"[V/jt] => 7[W/x] by Lemma[031(3) and V 7 => W. 
We also have D { = M' • L = M' • x.(7") => 7[W/x] from M' => W and 7" => 7. Therefore 
Di => 7 [W/jc] <= D 2 holds. 

The case of (ii). We first claim that, for any S and V, if (S).a => V, then there is some M such 
that S = M • a, M => V, and a is not free in M. This claim is easily obtained from the definition 
of the parallel reduction. In this case, we have V <= M = (Sq).[3 => (So').f3. By the induction 
hypothesis and Lemma l7.14l (l). there is a value W such that V => W <= (So').f3. Then, there exists 
a such that So' = N • ft, N => W, and yS is not free in ,/V from the above claim. Hence we have 
Di =S'[L/a] = S '[a/fi][L/a] =S '[L/fi] = (N • fi)[L//3] = N • L. We then consider the subcases 
(a) and (b). 

The subcase of (a). By the induction hypothesis, there exists a statement 7 such that (x • L) => 
7 <= r. Hence we have Di = (x • L)[iV/jc] => f[W/x] <= T'[V/x] = D 2 from N ^> W <= V and 
Lemma|7ITl(3). 

The subcase of (b). By the induction hypothesis and T' <= T => T" , there exists 7 such 
that r => 7 <= 7". Hence we have D 2 = 7'[V7x] => f [W/x] by Lemma EH (3) and V => W. 
We also have Di = N • L = N • x.{T") => f [W/jc] from JV => W and 7" => f . Therefore 
Di ^ T[W/x] t= D 2 holds. 

The other cases are also proved by the induction hypothesis. □ 

From Lemma 17.151 we can obtain the Church-Rosser property of the weak call-by- value DQuv. 

Proposition 7.16. The reduction relations — > wC bv and — > w cbn 0/DQuVd, v satisfy the Church-Rosser 
property. 

Proof. We first show the Church-Rosser property of — > w cbv- Suppose that D — >* CBV D' and 
D — >* D" hold. We will show that there exists some E such that D' — »* , E and D" — >*™, 

wCBV wCBV wCBV 

E. We have D = D 00 — > wCBV D i — > wCB v • ■ • — » w cbv D on = D' and D — > wCBV D w — > wCBV 
. . . — > wCBV D\ m = D" for some n,m > 0. By Lemma 17.151 (1). D => Dq\ Dq,, = D' and 

D => D" Q D" = D" hold. By the diamond property of =>, there exists Dy+iyj+i) such 

that D/y+i) => D(i + i)(; + i) <= D(j + i)j for each < / < n — 1 and < j < m - \. Hence we have 
D' = Do,, => Di„ =^> . . . => D mn and D" = D m o => D m \ . . . => D,,,,,. By Lemma l7. 151 (2). we can 
replace => by — ^ CBV . Therefore, we have D' — >* CBV D m „ and D" — >* CBV D mn . 
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The Church-Rosser property of — > w cbn is shown by the former result and the duality between 
— > wCB vand — > mCB n (Proposition [733> • □ 

We will next define the call-by-value and the call-by-name DQuv, which we call CBV DQuv and 
CBN DQuv. The types, expressions, and typing rules of CBV DQuv and CBN DQuv are the same as them 
of DQuv. 

The reduction relation of CBV DQuv is obtained by adding ^-rules to the weak call-by-value 
DQuv. 

Definition 7.17 (Reduction relation of CBV DQuv). The reduction relation — > C bv of CBV DQuv is 
defined by the compatible closure of the reduction rules of the weak call-by- value DQuv and ($A\) V , 
(?^2)v> (S"Vi)v> (?V2) V , and the following reduction rules: 

(gfi) v in^ xc <M) -^ C bv (M • x.{irf xc (x) • a)).a, 

($v) v coitr^<M, M) — > C bv (M • *.(coitr^(M, x) • a)).a, 

where M is not a value of DQuv, and the variable x and the covariable a in (g/j) v , ($v) v are fresh. 

We sometimes write (fi) v to mean (fiAi) v , 06A 2 ) V , (jSVi) v , 08V 2 ) v , (fi^)v, W)v, (fiv) v , Q3L) V , or 
(S/?),,-rule. We write (77),, to mean (t]L) v or (?yL) v -rule. We also write (g) v to mean ($"Ai) v , (gA2) v , 
(fVi) v , (gV 2 ) v , fou) v , or (^v) v -rule. 

The reduction relation of CBN DQuv is obtained by adding ^-rules to the weak call-by-name 
DQuv. 

Definition 7.18 (Reduction relation of CBN DQuv). The reduction relation — > C bn of CBN DQuv is 
defined by the compatible closure of the reduction rules of the weak call-by-name DQuv and (gA\) n , 
(?^2)n, (<TVi)„, {^i)n, and the following reduction rules: 

{gn)n itr£[£, <K\ *cbn x.((x • itr$[K, a]).a • <K), 
{gv) n o\iX? xc VK] — *cbn x.((x • out vXC [a]).a • 7f), 
where 7C is not a covalue of DQuv, and the variable x and the covariable a in {gp) n , ($"v)„ are fresh. 

From the above definitions, CBV DQuv includes the weak call-by-value DQuv, and CBN DQuv 
includes the weak call-by-name DQuv. That is, the following lemma holds. 

Lemma 7.19. Let D and E be expressions o/DQuv. Then, the following claims hold. 

(1) IfD — > wCBV E, then D — > CBV E. 

(2) IfD — > wC bn E, then D — > C bn E. 

The call-by- value DQuv is dual to the call-by-name DQuv. 

Proposition 7.20 (Duality between call-by-value and call-by-name in DQuv). Let D and E be ex- 
pressions o/DQuv. Then, D — >cbv E ijf{D)° — >cbn (E)°, where (— )° is the duality transformation 
o/DQuv defined in the section 3. 

The call-by-value and call-by-name DQuv satisfy both the Church-Rosser and strong normal- 
ization properties. We will concentrate to show these properties of CBV DQuv. The proof will be 
performed by giving a transformation from CBV DQuv into the weak call-by-value DQuv. The trans- 
formation (-)* given as follows. 
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Definition 7.21. Let D be a expression of DQuv. The expression (D)® of DQuv is defined inductively 
as follows. 

(*)• = x, 

((V, W)f = ((V)®, (Wf), 

((V, AO)® = ((AO® • y-(((Vf,y) • a)).a, 

«At, W»® - ((At)® • x.«jc, (W)®> • a)).ar, 

«At, AO)® = ((At)® • x.(((A0® • y.«*.y> • £))■£ • cr)).a, 

«V>inl)® - <(y)®)inl, 

«At)inl)® = ((At)® • x.((x)inl • a)).a, 

«V>inr)® - ((y)®)inr, 

«At)inr)® - ((At)® • ;c.«jc>inr • a)).a, 

(|X]not)® - [(^)®]not, 

(in^ XA (Al»® - ((At)® • x.(irf XA (x) • a)).a, 

(in^- A (V»® - in /iXA <(V)®), 

(coitr A <M, V))® = coitr A ((M)®,(V)®>, 

(coitrf<M, AO)® = ((AO® • y.(coitr A <(M)®,y> • a)).a, 

((S).af = ((Sf).a, 

(or)® - a, 

([K,L]f = [(Kf,(L)% 
(fst[K]f - fst[(/Q®], 
(snd[X])® - snd[(7T)®], 
(not(M»® = not<(M)®>, 
(out vXA [^])® = out vXA [(Kf], 
(itr A [^,L])® - itr£[(*) e , (L)*], 
(x.(S))® = x((S)®), and 
(M • K)® = (M)® • (*0®, 
where V and W are values, At and N are not values, and x, y, a, /? are fresh. 

We need the redundant definition of ((At, AO)® for a technical reason, and it is necessary in 
order to show Proposition 17.251 

The transformation (— )® preserves typing. 

Proposition 7.22. Let M be a term, K be a coterni, and S be a statement of DQuv. The following 
claims hold. 

(1) IfY 1-dquv A | M : A is provable, then Y h DCiUV A | (M)® : A holds. 

(2) IfK:A\T i-dquv A is provable, then (K)® : A\T h DC p V A /ioWs. 

(3) IfY | 5 i-dqjv A is provable, then Y \{S)® H DC(UV A holds. 

Proof. They are shown simultaneously by induction on M, K, and 5 . □ 
The transformation (— )® satisfies the following basic properties. 

Lemma 7.23. Let V be a value, M andN be terms, D be an expression o/DQuv. Then the following 
claims hold, 
(1) M is a value iff(M)® is a value. 
(2a) <(M)®,(A0®>^: CBV «M,A0)® 

(2b) <(M)®>inl — ^ «M)inl)®, and <(M)®>inr — ^ «M>inr)®. 
(2c) in^ A <(M)®> — »• (in" XA <M»®. 
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(2d) coitrf <(M)®, (A0®> ^„cbv (coitrf (M,N))®. 
(3a) monof £ r {(M)®, (AO®) -^; cBV (monof A Cx {M, N })•. 
(3b) mono™ J(Kf,(Lf} ^* wCM (monof jjK, L})®. 
(4) D -^* BV (Df. 

Proof. The claim (1) is shown by the definition of (-)*. The claims (2a), (2b), (2c), and (2d) are 
shown by (1) and ^--rules. The claims (3a) and (3b) are shown by induction on ||C||x using (2a), 
(2b), (2c), and (2d). The claim (4) is shown by induction on D. □ 

The transformation (— )® preserves substitution of a value for a variable, and of a coterm for a 
covariable. 

Lemma 7.24. (D[V/x]) m = (D)®[(V)®/x] and (D[K/a]f = (D)®[(Kf /a]. 

Proof. The former claim is shown by induction on D using Lemma |7.23l (l). The latter one is shown 
by induction on D. □ 

The transformation (-)* translates one step reduction of — > C bv into zero or more steps reduc- 
tion Of > wC BV- 

Proposition 7.25. D — > C bv E implies (D)® — >* CBV (£")®. In particular, if D — > C bv E by (fi) v or 
(n) v , then (Df — ^ (Ef holds. 

Proof. The claim is shown by induction on the definition of — > CBV . We show the cases of (/3L) V , 
08/i) v , and (§-Ai) v . 

The case of (fJL) v is proved by Lemma E24] We have {V • x.(S))® - (V)® • x.((S)®) ^ wCB v 
(S)®[(V)®/x]. By LemmaEll the last statement is (5 [V/x])®. 

The case of (J3fi) v is proved by Lemma E23] (3b). We have (in^ xc (V> • itr£[£, L])® = 
irf xc ((Vf) • itr£pO®,(L)®] -^ wCBV ((V) m • mono^ c ^{ itr^p:)®,/?], (K)®}).a • (L)® = 
((V)® • mono x f CA p{{itr*[K,/3])®, {K)®}).a • (L)®. By Lemma E23] (3b), the last statement is 
reduced to ((V)® • (mono*f CA/; { itr^[K,/3], K })®).a • (L)® by — »* CBV . Therefore this statement is 
((V • mono*f CA/J { itri[K,J3], K }).a • L)®. 

The case of (g/\\) v is proved by the definition of (-)®. We consider the subcase of 
(M, N) — >cbv (M.*x.((x, N)»a)).a, where M and N are not values. Hence we have ((At, A/))® = 
((At)® • x.(((N)® • y.{{x, y) • /?))./? • = ((M)® •x.(((x,N)f »a)).a = (M»x.((x,N)»a)).af. 
The other subcase of (gA\) v for (N, V) with a non- value M is shown in the similar way. 

The other cases are also shown by the induction hypothesis. □ 

Then we can show the Church-Rosser property of — > CBV and — >cbn- 

Theorem 7.26. The reduction relations — >cbv of CBV DQuv and — >cbn of CBN DQuv satisfy the 
Church-Rosser property. 

Proof. We first show the Church-Rosser property of — > CBV . 

Assume that D — >* BV D' and D — >* B¥ D" hold. By Proposition |T2U we have (D)® — >* CBV 
(DO® and (D)® — >* CBV (D")®. By the Church-Rosser property of — > wCBV , there exists E such that 
<7)')® ^* cbv E and (D")® -^ CBV E. Therefore, by Lemma ITTT9l (l) and LemmaE23](4), we 
have D' -A* B¥ (D')® — E and D " ^cbv ^cbv E - 

The Church-Rosser property of — > C bn is shown by the former result and the duality between 
— >cbv and — > C bn (Prop 17. 201 ). □ 
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We will prove strong normalization of CBV DQuv and CBN DQuv. This property is shown by 
using the strong normalization result of the weak call-by-value and the weak call-by-name DQuv 
(Proposition 17.1 II ). 

We define the following rank of expressions in DQuv. This rank is used to show that there is no 
infinite sequence of ^--rules. 

Definition 7.27. Let D be an expression in DQuv. The rank r(D) of D is defined by: 

r(x) = r(a) = 0, 

r([K]not) = r(fst[K]) = r(snd[K]) - r(out vXA [K]) = <K), 

r([K,L]) = r(itri[K,L]) = r(K) + r(L), 

r(not(M» - r(M), 

r((M, AO) = r{M) + r{N) + 2, 

r((M, V)) = r((V, M)) = r(M) + r(V) + 1, 

r((V, W)) = r(V) + r(W), 

r«X)inl) = r«M)inr) = r{irf XA {M)) = r{M) + 1, 
r«V)inl) = r«V)inr) = r(irf XA (V)) = r(V), 
r(coitr^(M, A/)) - r(M) + r{N) + 1, 
r(coitr^<M, V)) = r(M) + r(V), 
r(x.(S )) = r((S).a) = r(S ), and 
r(M • K) = r(M) + r(K), 

where V and W are values, and At and N are not values. 

The rank r(D) counts the number of redexes of ($"Ai) v , (^A2) v , (?Vi) v , (^V2) v , (?yu) v , and {gv) v - 
rules. We write D — > ?v E when D is reduced to E by one step (^) v -reduction. 

Lemma 7.28. Let D and E be expressions ofVCfjv. Then, the following claims hold. 

(1) IfD — > ?v E, then r(D) > r{E). 

(2) There is no infinite sequence of (g) v -reduction. 

Proof. The claim (1) is shown by induction on D. The claim (2) is shown by (1). □ 
We then show strong normalization of CBV DQuv and CBN DQuv. 

Theorem 7.29 (Strong normalization of CBV DQuv and CBN DQuv). The following claims hold. 

(1) Every typable expression is strongly normalizing in CBV DQuv. 

(2) Every typable expression is strongly normalizing in CBN DQuv. 

Proof. We first show the call-by- value case. Assume that D is typable in DQuv and there is an infinite 
reduction sequence 

D >CBV Dl >CBV ■ ■ ■ 

starting from D. Then (D)® is typable by Proposition 17.221 and we have 

yLJ > wCBV y ~ tJ ^> wCBV ■ • ■ 

by Proposition 17 .25 1 From the strong normalization result of the weak call-by- value DQuv (Proposi- 
tion |7jT|), there is some such that 

(At)® = (Dfc+i)® = — 

By the latter part of Proposition 17.251 we have the following infinite sequence of (^) v -reduction: 
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This contradicts Lemma 17.281 (2). 

The call-by-name case is proved by strong normalization of CBV DQuv and the duality between 
CBV DQuv and CBN DQuv (Proposition [7T2Ql >. □ 

8. Conclusion 

We have introduced the non-deterministic system DQuv by extending the dual calculus given in E71 
with inductive types and coinductive types. Besides the same duality of the original dual calculus, 
we have shown the duality of inductive and coinductive types, by giving the involution that maps 
terms and coterms for inductive types to coterms and terms of coinductive types respectively and 
vice versa, and maps their reduction rules to each other. We have proved its strong normalization 
by translating it into the second-order dual calculus DC2. 

The second-order dual calculus DC2 also have been introduced. Its strong normalization have 
been shown by translating it into the second-order symmetric lambda calculus. 

We have finally introduced the call-by-value system CBV DQuv and the call-by-name system 
CBN DQuv of the dual calculus with inductive and coinductive types. We have shown the duality of 
call-by-value and call-by-name with inductive and coinductive types, their Church-Rosser property, 
and their strong normalization. Their strong normalization have been shown by translating them 
into DQuv. 

The first author introduced the call-by-value and call-by-name dual calculi with recursive 
types ifTTl section 4.2]. In these systems, a recursive type rec X.A can be denned for any type 
A. If we assume that rec X.A can be defined only if every X positively occurs in A, then we can 
define two provability-preserving transformations from the dual calculi with recursive types into 
DQuv. The one translates a recursive type to an inductive type, and the other translates a recursive 
type to a coinductive type. We could not straightforwardly show that these transformations preserve 
reductions (or equations) since some additional rules such as ?7-rules for connectives seem to be 
required. This problem would be future work. 

The duality of call-by-value and call-by-name in iyu-calculus is shown by using the dual calculi 
in ESI . Since our systems CBV DQuv and CBN DQuv are extensions of his dual calculi, we could 
show the duality of call-by-value and call-by-name in /{//-calculus with inductive and coinductive 
definitions, by using our systems CBV DQuv and CBN DQuv. It would be future work. 

A reduction-based duality between call-by-value and call-by-name in the /lyu-calculi was pre- 
sented in 11121 . by refining Wadler's result ll28l . Extending the result given in lfT2l with inductive 
and coinductive types would be future work. 

Our systems use the iteration for inductive types. An extension of the iteration to primitive 
recursion would be future work. 

A CPS translation from the dual calculus to i-calculus was given in |[27l . Extending this CPS 
translation to the systems with inductive and coinductive types would be future work. 
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